Key Concepts Lecture 1

Question 1

Name the three key goals of information security

Answer 1

Confidentiality, Availability, Integrity

Question 2

What is an issue that

Answer 2

It can be difficult to define who is authorised to perform what operation on which data

Question 3

Name some characteristics of availability (a data item or service is deemed available if…)

Answer 3

It is present in a usable form
It is making clear progress
It completes in an acceptable period of time
Requests are handled timely and fairly
It can be used easily and in the way it was intended to be used

Question 4

What are the 4 classes of vulnerabilities?

Answer 4

Interception, Interruption, Modification, Fabrication

Question 5

Give an example of how each of the 4 classes of vulnerabilities can affect harware

Answer 5

Example answers:
Interruption - Denial of service
Interception - Theft
Modification - Alter the hardware to monitor the user without their permission
Fabrication - Substitution

Question 6

Give an example of how each of the 4 classes of vulnerabilities can affect software

Answer 6

Example answers:
Interruption - Deletion
Interception -
Modification -
Fabrication -

Question 7

Give an example of how each of the 4 classes of vulnerabilities can affect data

Answer 7

Example answers:
Interruption - Loss
Interception - 
Modification - 
Fabrication -