WHY STUDY COMPUTER SECURITY?
—An information security specialist is more than a technician who prevent hackers from attacking a Web site.
—BUT, need to understand about cryptography and firewall which these tools used by specialists to protect information systems.
—Growing IT security importance and new career opportunities
—Increasing demand by government and private industry
—BUT, need to understand about cryptography and firewall which these tools used by specialists to protect information systems.
—Growing IT security importance and new career opportunities
—Increasing demand by government and private industry
SECURITY IMPORTANT
- for businesses:
-IT is core to virtually all business processes within most
organisations
many organisations could go out of business if IT was disrupted in
a serious way - egally, the Data Protection Act 1988 says:
‘‘Appropriate security measures shall be taken against
unauthorised access to, or alteration, disclosure or destruction of,
personal data and against accidental loss or destruction or personal
data’’
DEFINITION OF SECURITY
deter
to create and implement policies that allow us to generate a
feasible and believable deterrence.
detect
to create and implement policies that allow us to detect how, when
and where intrusion has taken place.
protect
to create and implement policies and procedures that allow us to
manage people and the IS in an effective manner so as to protect
against unauthorised usage.
THREE CONCEPTS OF CIA SECURITY MODEL
Availability
-presence of objects or service in a usable form
-capacity to meet service needs
-adequate timeliness of a service
- Confidentiality
information must not be disclosed to any unauthorised person
Integrity
-system must not corrupt data
-system must disallow unauthorised, malicious or accidental data
changes
-three aspects of integrity
#wauthorised actions
#separation and protection or resources
#error detection and correction
