CIA

Anotações:

• Security of Data confidentiality,Integrity and Availability

1. Confidentiality

   Anotações:

   • Confidentiality means that only the authorized individuals/systems can view sensitive or classified information
   1. Data in motion accross the network
      1. Examples
         1. secure
            1. SSH
            2. SFTP
            3. https
         2. Nonsecure
            1. FTP
            2. Telnet
            3. http
   2. Data at rest

      Anotações:

      • when data is sitting on storage media
      1. Examples
         1. server
         2. Local workstation
         3. Data sitting in the cloud
      2. data is sitting on storage media
         1. DC/DVD
         2. Hard Disks
2. Integrity of data

   Anotações:

   • changes made to data are done only by authorized individuals/systems
   1. Changes made to data are done only by authorized individuals/systems
3. Availability

   Anotações:

   • the network or its data is not available to authorized users
   1. non available of data to authorized users
      1. denial-of-service (DoS) attack
      2. General network failure
   2. of the system
   3. of the data