Notecards for Testout Security Pro Chapter 1 - Course Introduction, 2023.
Security
The degree of protection against danger, damage, loss, and criminal activity
Confidentiality
…ensures that data is not disclosed to unintended persons
Integrity
…ensures that data is not modified or tampered with
Availability
…ensures that a system is up so that data is available when needed
Non-Repudiation
…provides the validation of a message's origin
Asset
Something that has value to an individual or an organization
Threat
Anything that has the potential to cause the loss of an asset
Threat agent
The person or entity that attempt or carries out a threat
Vulnerability
An opening or weakness in the system
Exploit
An act, procedure, or piece of software that takes advantage of a vulnerability to carry out an attack
Layered security
A security approach that combines multiple security controls and defenses to create a cumulative effect
Layered security model
A security approach that defines seven layers of security