Digital Security
Information security
Information Security means protecting information and information systems from unauthorised access, use, disclosure, disruption, modification, or destruction. Constitutes a basic right: protection of self.
Link to original
Digital Security
Digital security consists of technologies, processes and controls designed to protect systems, networks, programs, devices and data from attacks.
Link to original
Contents
Security Triad
CIA Security Triad
The CIA security triad consists of confidentiality, integrity and availability.
Link to original
- Confidentiality: Prevent disclosure of information to unauthorized individuals.
- Integrity: Ensure that data has not been tampered with and the sourec of information is genuine.
- Availability: Data is obtainable regardless of how information is stored, access, or protected.
AAA Security Principle
AAA Security Principle
The AAA security principle is a framework that builds on top of the CIA triad.
Link to original
- We control who is permitted to use resources, through authentication. Process of identifying user-validity by asking for credentials.
- We use permissions to determine what they are authorized to do. Authorization is enforcing policies for determining the qualities of activities, resources, or services.
- We log actions perfomed on the network, through accounting (non-repudiation). It ensures that network admins will always be able to track down the user to monitor and audit their activites such as logins, data sent, time and location of access.