Scribd Logo
Upload

Welcome to Scribd!

  • 172-1592201863765-HND SEC W1 Introduction To IT Security

    Uploaded by

    life seconds
    7 views15 pages
    Information security aims to prevent unauthorized access, use, disclosure, disruption, modification, inspection, recording or destruction of information. There are two main types of attacks: active attacks where the attacker modifies information or creates false messages, and passive attacks where the attacker spies on information without changing the system. Key security concepts include confidentiality, integrity and availability to ensure information is private, accurate and accessible by those authorized. Common approaches to achieving security are encryption to encode data, digital signatures to authenticate electronic documents, and access control to limit system access.

    Original Description:

    Original Title

    172-1592201863765-HND SEC W1 Introduction to IT Security

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Information security aims to prevent unauthorized access, use, disclosure, disruption, modification, inspection, recording or destruction of information. There are two main types of attacks: active attacks where the attacker modifies information or creates false messages, and passive attacks where the attacker spies on information without changing the system. Key security concepts include confidentiality, integrity and availability to ensure information is private, accurate and accessible by those authorized. Common approaches to achieving security are encryption to encode data, digital signatures to authenticate electronic documents, and access control to limit system access.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    7 views15 pages

    172-1592201863765-HND SEC W1 Introduction To IT Security

    Uploaded by

    life seconds
    Information security aims to prevent unauthorized access, use, disclosure, disruption, modification, inspection, recording or destruction of information. There are two main types of attacks: active attacks where the attacker modifies information or creates false messages, and passive attacks where the attacker spies on information without changing the system. Key security concepts include confidentiality, integrity and availability to ensure information is private, accurate and accessible by those authorized. Common approaches to achieving security are encryption to encode data, digital signatures to authenticate electronic documents, and access control to limit system access.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 15

    Unit 5 –Security

    LO1. Assess risks to IT security.


    1.Introduction to IT Security.

    1
    Definition of Information security .

    ▪ Security is defined as the state of being free from danger


    or threat.
    ▪ Information security is defined as the practice of
    preventing unauthorised access, use, disclosure,
    disruption, modification, inspection, recording, or the
    destruction of information.

    2
    Types of Attacks

    ▪ An attack is any action that compromises the security of


    information owned by an organisation.

    Attacks

    Active Passive
    Attacks Attacks
    3
    Active Attacks

    ▪ The attacker tries to modify the information or creates a


    false message.

    4
    Passive Attacks

    ▪ Attackers do not affect or change the system


    operations.
    ▪ Spy or steal sensitive information from the system to
    learn important data about the system of the
    organization.

    5
    Key Security Concepts

    6
    Key Security Concepts

    ▪ Confidentiality – ensures that sensitive information are


    accessed only by an authorized person and kept away
    from those not authorized to possess them.
    ▪ It is implemented using security mechanisms such as
    usernames, passwords, access control lists (ACLs), and
    encryption.

    7
    Key Security Concepts

    ▪ Integrity – ensures that information are in a format that


    is true and correct to its original purposes. The receiver
    of the information must have the information the creator
    intended him to have.
    ▪ Integrity is implemented using security mechanism such
    as data encryption and hashing.

    8
    Key Security Concepts

    ▪ Availability – ensures that information and resources


    are available to those who need them.
    ▪ It is implemented using methods such as hardware
    maintenance, software patching and network
    optimization.

    9
    Achieving Security

    There are a number of approaches that we can take in


    order to achieve security.
    ▪ Encryption
    ▪ A process which converts plain text messages or data
    into cipher text.

    10
    Encryption

    ▪ This is done by using an encryption algorithm with a key


    or a password.
    ▪ An encryption algorithm is the mathematical formula
    used to transform data into ciphertext.

    11
    Types of Encryption

    Encryption

    Asymmetric-key encryption
    Symmetric-key encryption In asymmetric, or public key,
    encryption, there are two keys:
    Symmetric-key encryption involves
    one key is used for encryption, and
    the sharing of a single key.
    a different key is used for
    decryption.

    12
    Digital Signature

    ▪ Similar to a physical signature that place on a physical


    document such as a letter, users can digitally sign
    electronic documents and communications too.
    ▪ Digital signatures are used in e-commerce, software
    distribution, financial transactions and other situations
    that rely on forgery or tampering detection techniques.
    ▪ A digital signature is also known as an electronic
    signature.

    13
    Access Control
    ▪ Access control is a way of limiting access to a system or
    to physical or virtual resources.
    ▪ In computing, access control is a process by which
    users are granted access and certain privileges to
    systems, resources or information.
    ▪ The simplest access control method is to use a
    username and a password, so that only authorised
    people can gain entry to a system.

    14
    Lesson Summary

    ▪ Definition of IT Security.
    ▪ Types of Attacks.
    Active attacks
    Passive attacks
    ▪ Key Security Concepts.
    ▪ Achieving Security.
    Encryption
    Digital Signature
    Access control

    15

    You might also like