Chapter 1: Introduction to Security Flashcards
yeeeeeeeeeee
1
Q
CIA
A
Confidentiality, Integrity, Availability
2
Q
What does Confidentiality do?
A
Prevents disclosure of information to outside party
3
Q
Integrity
A
Guarantees data has not been tampered with
4
Q
AAA
A
Authentication, Authorization, Accounting(non-repudiation)
5
Q
What is Authentication?
A
Confirms one’s identity
e.g.) username/password, biometrics, signature etc
6
Q
What is Authorization?
A
Allows one to access certain materials
e.g.) ACL(Access Control Lists), Linux permission bits etc
7
Q
What is Accounting of Data?
A
Tracking of data/comp./netwrk resources usage for individuals
e.g.) Logging, auditing, data/network monitoring
8
Q
Types of Threats
A
Malicious Software
- Unauthorized Access - System Failure - Social Engineering
9
Q
Technical security plan
A
- Technical : Smart cards, ACLs, encryption etc
10
Q
Protection Methods
A
- User Awareness
- Authentication
- Anti-malware
- Data Backups
- Encryption
- Data Removal
11
Q
Physical security plan
A
- Physical : Physical security systems such as alarms, ID cards, CCTV etc
12
Q
Administrative Security plan
A
- Administrative : Policies, procedures, DRP(Disaster recovery plan) etc
