CIT114 Information Security Week 02

Study Notes

Computer Security protects an automated information system, ensuring integrity, availability, and confidentiality of resources, including hardware and software.
The NIST Computer Security Handbook provides a foundational definition of Computer Security.

Confidentiality: Protects data privacy and ensures sensitive information is not disclosed.
Integrity: Maintains the accuracy and reliability of data and systems, preventing unauthorized modifications.
Availability: Ensures authorized users can access information and resources when needed.
Authenticity: Verifies data and identities are genuine, confirming they originate from trusted sources.
Accountability: Links actions to individuals, aiding in incident investigation and compliance with security policies.

Security Complexity: Security solutions can be intricate and challenging to implement despite straightforward naming.
Sneaky Attacks: Attackers often exploit subtle weaknesses within security frameworks.
Unusual Procedures: Security measures can appear complex and unintuitive, complicating their adoption.
Implementing Security: Choosing appropriate security measures requires thoughtful consideration and planning.
Secrets and Protocols: Security involves managing confidential information and navigating complex communication protocols.
Ongoing Battles: Defense mechanisms must continually adapt to outsmart attackers' tactics.
Awareness and Importance: People frequently undervalue security until incidents occur, emphasizing the need for proactive measures.
Regular Monitoring: Continuous oversight is crucial for effective security management.
Early Integration: Security should be included in the initial development phase, not treated as an afterthought.
Usability vs. Security: Achieving a balance is essential; strong security should not overly hinder usability.

Computer system assets are categorized into hardware, software, data, and communication facilities.
Essential components of information security include different software types (operating systems, applications) and their respective security mechanisms.

Important terms include adversary (threat agent), attack, countermeasure, risk, security policy, system resource (asset), threat, and vulnerabilities.

Owners aim to mitigate risks while establishing security policies against threats posed by threat agents.
Countermeasures are implemented to address vulnerabilities, factoring in various risks to computer systems.

Threat consequences include disruption, exposure, interception, inference, intrusion, deception, and misuse.
Types of attacks can be classified as either active or passive.
Attacks may originate from inside (internal threats) or outside (external threats) of an organization.

Analyze the security of an automated teller machine (ATM) system where users provide a PIN and card for account access, highlighting potential threats and security measures.