322327
Beschreibung
Mindmap von Craig Parker, aktualisiert more than 1 year ago
|
Erstellt von Craig Parker
vor mehr als 10 Jahre
|
|
U2.1 Comp Sec: deals with prevention
& detection of unauthorised
actions by users of a comp system
- Accountability &
Authorisation
- Accountability
closely related to
detection
- Keep audit trails and logs
protected so actions affecting
Sec can be traced to those
responsible
- Keep audit trails and logs
protected so actions affecting
Sec can be traced to those
responsible
- Authorisation
related to prevention
- Users must be
identified and
authorised, usernames
/ passwords
- Users must be
identified and
authorised, usernames
/ passwords
- Accountability
closely related to
detection
- Confidentiality
- Prevent unauthorised
disclosure
- Stop
unauthorised
viewing
- Prevention more important
than detecting or reacting
- Prevention more important
than detecting or reacting
- Cant recover
from a breach of
confidentiality
- Stop
unauthorised
viewing
- Privacy
- Protecting
personal data
- Protecting
personal data
- Secrecy
- Protecting
organisational
secrets
- Protecting
organisational
secrets
- Prevent unauthorised
disclosure
- Integrity
- Prevent unauthorised
modification
- Internal Consistency
- Clark & Wilson
- No user of a system even if authorised
may be permitted to modify data in a way
that assets or accounting records are lost
/corrupted
- No user of a system even if authorised
may be permitted to modify data in a way
that assets or accounting records are lost
/corrupted
- Clark & Wilson
- External consistency
- Orange Book
- data has not been exposed to
to accidental or malicious
alteration or destruction
- data has not been exposed to
to accidental or malicious
alteration or destruction
- Orange Book
- Detection of intentional /
accidental modifications
- Internal Consistency
- A prerequisite for
many security services
- Prevent unauthorised
modification
- Availability
- Prevent unauthorised
withholding of information
/ resources
- May be the most
important aspect of
Comp Sec
- DDOS
- Prevent unauthorised
withholding of information
/ resources
- Prevention
- Measures to
prevent damage
- Measures to
prevent damage
- Detection
- Detecting when, how &
who did damage
- Maintaining the integrity
- Maintaining the integrity
- Detecting when, how &
who did damage
- Reaction
- Recovery
from damage
- Recovery
from damage
- Reliability &
dependability
- Making
systems
dependable
- Extremley important in
safety critical systems,
national infrastructure
- Extremley important in
safety critical systems,
national infrastructure
- Making
systems
dependable
Möchten Sie kostenlos Ihre eigenen Mindmaps mit GoConqr erstellen? Mehr erfahren.