أمن المعلومات

Information Security

• Information security protects data and information on the internet from tampering, alteration, and unauthorized access.
• This involves protecting data from both internal and external threats.
• Key components of information security are confidentiality, integrity, and availability.

Confidentiality

• Confidentiality ensures data security by preventing unauthorized access.
• It means restricting access to data to authorized individuals and processes.
• Techniques used for ensuring confidentiality include passwords, encryption, authentication, firewalls, and intrusion detection/prevention systems.

Integrity

• Integrity means maintaining data accuracy and preventing unauthorized modifications or damage.
• Techniques like hashing (detecting changes) and backups (restoring data) protect integrity.
• Confidentiality techniques also protect data integrity by preventing unauthorized access to modify data.

Availability

• Availability ensures data is accessible when needed by authorized users.
• Ensuring data is accessible by authorized users while restricting unauthorized access is crucial.

Importance of Information Security

• Reducing the risk of data breaches and attacks on IT systems.
• Implementing security controls to prevent unauthorized access to sensitive information.
• Preventing service disruptions, such as denial-of-service attacks.
• Protecting IT systems and networks from cyberattacks.
• Minimizing downtime for critical services to maintain business continuity.
• Protecting data and IT assets to ensure business continuity.
• Maintaining data confidentiality against security threats.

Types and Forms of Information Security

• Application Security: Focuses on vulnerabilities in software, web applications, mobile apps, and APIs.
• Cloud Security: Protecting applications in cloud environments.
• Encryption: Often using digital signatures for verifying data access.
• Infrastructure Security: Protecting internal and external networks, labs, data centers, servers, PCs, and mobile devices.

Information Security Specializations

• Penetration Testing (Ethical Hacking): Simulates attacks to identify vulnerabilities.
• System/Threat Analysis: Analyzing network and computer systems to predict and prevent threats.
• Digital Forensics: Investigating computer systems to find evidence of crime.
• Incident Response/Vulnerability Analysis: Responding to security incidents and planning for disasters.
• Information Security Specialist: A general term for various duties related to information security.
• Information Security Consultant: Provides advice and implements security measures for organizations.
• Application Security Engineer: Tests and reviews code for security vulnerabilities.
• Malware Analyst: Studies and combats malware (viruses, worms, trojans).
• Information Security Engineer: Designs, implements, and maintains information security systems.

Databases

• A database is a structured collection of related data.
• Database Management Systems (DBMS) are used for retrieving, adding, modifying, and deleting data.
• Database structures include relational, hierarchical, and network models.
• Relational databases are the most common and offer greater flexibility in relating data.
• Databases improve data access, storage efficiency, and sharing.
• Databases ensure data security by creating backups and restricting access.
• Database security is needed to protect against data breaches and unauthorized access.

Computer Viruses

• Computer viruses are malicious software designed to spread from one computer to another.
• They typically affect files and operating systems.
• Common virus types include Trojans, worms, and viruses.
• Viruses disseminate through various channels: email attachments, unofficial online services, downloaded files, storage media, and social media.