CS205 Handouts

Course Books

Principles of Information Security 3rd Edition by Michael E. Whitman and Herbert J. Mattord Computer Security: Art and Science, Matthew Bishop Cryptography and Network Security by William Stalling 6th Edition, 2012

Learning Objectives

Learn basic concepts of Information Security Develop good understanding of security, security issues, security policies, information assets, threats and Software Attacks with deep insight Ability to understand and plan security information system Knowledge gained in this course will be helpful in implementation and maintenance of security policies

Week 1

– What is security?

What is Information Security?

Information Security is the practice of defending information from

• Unauthorized access,
• Unauthorized use,
• Disclosure,
• Disruption,
• Modification,
• Perusal,
• Inspection,
• Recording
• Destruction.

It is a general term that can be used regardless of the form the data may take.

Security is the prevention of certain types of intentional actions from occurring in a system.

• These potential actions are threats.
• Threats that are carried out are attacks.
• Intentional attacks are carried out by an attacker.
• Objects of attacks are assets.

Goals of Security

1. Prevention

• Prevent attackers from violating security policy

2. Detection

• Detect attackers’ violation of security policy

3. Recovery

• Stop attack, assess and repair damage

4. Survivability

• Continue to function correctly even if attack succeeds

Security Measures

Technology

• Hardware/software used to ensure security.

Policy and practice

• Security requirements and activities.

Education, training, and awareness

• Understanding of threats and vulnerabilities and how to protect against them.

The History of Information Security

Began immediately after the first mainframes were developed.

Code-breaking during World War II. (Machine enigma) Physical controls to limit access to sensitive military locations to authorized personnel: badges, keys, and facial recognition. One of 1st documented problems

• Happened in Early 1960s
• It was not physical in nature.
• Software glitch caused the accidental file switch