14

Information Security (Subject) / 01 Intro (Lesson)

This lesson was created by kwesendrup.

Learn lesson

This lesson is not released for learning.

back  |  next 1 / 1

• Security protection vs intentional malice
• Safety protection vs accidental threats
• Privacy data security (protect information systems) and data protection (protect personal data)
• Asset anything with value to the company
• Event observable occurrence on a system or network
• Threat possible event that might lead to a violation of security goals Masquerade, eavesdropping, authorization violation, data loss or modification, repudiation, forgery of information, sabotage
• Security Goals Confidentiality, (Data-)Integrity, Availability Additional: Accountability, controlled access
• Vulnerability weakness that could be exploited
• Risk the potential that a given threat will exploit vulnerabilities of an asset
• Control a safeguard that addresses a threat
• Advertisement
• Security Service abstract service that ensures Authentication, Integrity, Confidentiality, Access Control, Non-repudiation
• Kerckhoff’s principle and advantages cryptographic algorithms must be public, security depends only on secrecy of the keys Advantages: public exposure helps to identify flaws, change of keys is easier than change of algorithms
• Threat trees nodes (threat), subtree (detailed threat), child nodes (complete refinement of threat), connector (or, and)
• Resilience maintain service in the presence of attacks

back  |  next 1 / 1