Introduction - Information Security

  • Security
    • The quality or state of being secure, to be free from danger
    • Computer Security
      • Collection of tools designed to protect data and from the hackers
    • Internet Security
      • Measures to protect data during their transmission over a collection of interconnected networks
  • Security Goals (CIA Triad)
    • Confidentiality (Secrecy)
      • Only the intended recipient should see the communication
      • Protection of data from unauthorized disclosure
    • Integrity (Authenticity)
      • Data should not be modified till received by recipient
      • Assurance that data received is as sent by an authorized entity
    • Availability
      • Resources should always be available to the authorized user
  • Elements Of Information Security
    • Physical Elements
      • Guards, Camera, Restricted Zone, Downloading, Access Rights
    • System Elements
      • Antivirus, Malicious S/W Detection, Disable USB ports
    • Process Elements
      • Authorized User/Access Control, S/W Details, Log Entry
  • Layers of Security
    • Physical security
    • Personal security
    • Communications security
    • Network security
      • Measures to protect data during their transmission
    • Information security
      • Information is the result of processing, manipulating and organizing data in a way that adds to the knowledge of the receiver
      • Information Systems
        • An integrated set of components for collecting, storing, processing, and communicating information
      • Information security is the process of protecting information from unauthorized access, use, disclosure, destruction, modification, or disruption
Share: