Chapter 5 Security Principles in Information Technology

Confidentiality and Data Protection

• The principle of 'Confidentiality' aims to prevent unauthorized access, use, disclosure, or disruption of data.

Data Integrity

• The principle that aims to prevent unauthorized modification of files is Data Integrity.

Physical Security

• The main goal of 'Physical Security' is to prevent unauthorized physical access, damage, or interference with sensitive information, equipment, or facilities.
• The primary function of physical security barriers around a protected resource is to prevent or delay unauthorized physical access.

Intrusion Detection and Response

• The mechanism that assumes the intruder has succeeded or is in the process of gaining access to the system is called Intrusion Detection.
• The role of the 'Response' mechanism in security is to take action to stop or limit the damage when an intrusion is detected.

Firewalls and Network Security

• The primary function of a firewall in an information system facility is to control incoming and outgoing network traffic based on predetermined security rules.
• In the context of electronic access controls, the role of stateful inspection firewalls is to inspect the contents of packets and deny or allow them based on the rules defined.

Information System Security

• 'Information System Security' involves protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

Encryption

• The primary function of symmetric encryption in information security is to provide confidentiality and integrity by encrypting data with a single secret key.
• Asymmetric encryption differs from symmetric encryption in that it uses a pair of keys: a public key for encryption and a private key for decryption.

Physical Security Barriers

• The function of buried seismic sensors as part of physical security barriers is to detect and prevent unauthorized physical access.
• The purpose of using locks and keys in physical security barriers is to control access to sensitive areas or equipment.

Network Security Mechanisms

• The mechanism that aims to protect communications channels from eavesdropping by sniffers is encryption.
• A common feature of proxy servers in electronic access controls is that they act as an intermediary between clients and servers, filtering and controlling traffic.

Test your understanding of the principles of security in information technology, including confidentiality, integrity, and availability. Explore how security helps prevent unauthorized access, use, alteration, and theft of information and property.