Security Flashcards
Why is security a consideration in the SDLC?
Because it is important (integral)
What does CIA stand for?
The CIA for the system stands for confidentiality, integrity and availability.
CIA triad?
Data encryption
User IDs and Passwords
Two-factor authentication
Awareness of social engineering methods
Training for authorized people
The integrity of the system involves ensuring that information is trustworthy and accurate.
File permissions and user access controls
Version control
Backups
Checksums
The availability of the site involves ensuring that the information is accessible whenever it is needed:
Hardware and software components to prevent downtime (firewalls, proxy servers)
System upgrades up to date
Minimal or no downtime (fast and adaptive recovery)
Early detection of a denial of service attack.