Introduction and Fundamentals

Question 1

What are the CIA security properties?

Answer 1

Confidentiality, Integrity, Availability

Question 2

Name 5 security properties other than the CIA properties

Answer 2

Non-repudiation, Auditability, Accountability, Privacy, Anonymity

Question 3

Why can Security not be implemented in a single “Security Component”?

Answer 3

Security is a cross-cutting concern

Question 4

How can we define Security Engineering?

Answer 4

Security Engineering = Software Engineering + Information Security
Security Engineering is about building systems that remain dependable in the face of malice, error or mischance.

Question 5

What is the difference between safety and security?

Answer 5

Safety:
- is the system doing harm to its environment?
- Failures materialize as a consequence of normal and abnormal operations
- systematic and random errors, the latter modeled with stochastic processes
Security:
- is the environment doing harm to the system?
- malicious entity uses flaws in the system to do harm