Computer Security Definition

Page 1

Computer Security deals with

PREVENTION - taking measures to prevent asset from being damaged

DETECTION - taking measures to detect who, how and where caused the damage to the asset

REACTION - taking measures to recover from the damaged asset

In general it also includes:

CONFIDENTIALITY - prevent unauthorized disclosure of information

INTEGRITY - prevent unauthorized modification of information

AVAILABILITY - prevent unauthorized withholding of information/resource

authentication, authorization, accountability,

CONFIDENTIALITY

prevent unauthorized disclosure of information

prevent unauthorized reading of information

secrecy - protection of personal information

privacy - protection of company's information

INTEGRITY

prevent unauthorized modification of information

prevent unauthorized writing of information

Clark & Wilson (Internal Consistency) - No user even if authorized should be allowed to modify assets/account records of a company is lost or corrupted

Orange Book (External Consistency)

computerized data is same as the source document

has not been exposed to accidental or malicious alteration or destruction

AVAILIBILITY

prevent unauthorized witholding of information/resource

Denial of Service

the prevention of authorised access of resources or the delaying of time-critical operations

Distributed DDoS attack

Definitions