Testout Security Pro Chapter 1 - Course Introduction

Security

Security

The degree of protection against danger, damage, loss, and criminal activity

Confidentiality

…ensures that data is not disclosed to unintended persons

Integrity

…ensures that data is not modified or tampered with

Availability

…ensures that a system is up so that data is available when needed

Non-Repudiation

…provides the validation of a message's origin

Asset

Something that has value to an individual or an organization

Threat

Anything that has the potential to cause the loss of an asset

Threat agent

The person or entity that attempt or carries out a threat

Vulnerability

An opening or weakness in the system

Exploit

An act, procedure, or piece of software that takes advantage of a vulnerability to carry out an attack

Layered security

A security approach that combines multiple security controls and defenses to create a cumulative effect

Layered security model

A security approach that defines seven layers of security