Chapter 1-INTRODUCTION

WHY STUDY COMPUTER SECURITY?

—An information security specialist is more than a technician who prevent hackers from attacking a Web site.
—BUT, need to understand about cryptography and firewall which these tools used by specialists to protect information systems.
—Growing IT security importance and new career opportunities
—Increasing demand by government and private industry

SECURITY IMPORTANT

• for businesses:
  -IT is core to virtually all business processes within most
  organisations
  many organisations could go out of business if IT was disrupted in
  a serious way
• egally, the Data Protection Act 1988 says:
  ‘‘Appropriate security measures shall be taken against
  unauthorised access to, or alteration, disclosure or destruction of,
  personal data and against accidental loss or destruction or personal
  data’’

DEFINITION OF SECURITY

• 
  
  deter
  to create and implement policies that allow us to generate a
  feasible and believable deterrence.
  
• 
  
  detect
  to create and implement policies that allow us to detect how, when
  and where intrusion has taken place.
  
• 
  
  protect
  to create and implement policies and procedures that allow us to
  manage people and the IS in an effective manner so as to protect
  against unauthorised usage.
  

THREE CONCEPTS OF CIA SECURITY MODEL

1. 
   
   Availability
   -presence of objects or service in a usable form
   -capacity to meet service needs
   -adequate timeliness of a service
   
2. Confidentiality
   information must not be disclosed to any unauthorised person
   
   
   
3. 
   
   Integrity
   -system must not corrupt data
   -system must disallow unauthorised, malicious or accidental data
   changes
   -three aspects of integrity
   #wauthorised actions
   #separation and protection or resources
   #error detection and correction