ACC2400 Week 5: Information Security

Five Elements of System Reliability

Security, Confidentiality, Privacy, Processing Integrity, and Availability.

Confidentiality vs Privacy

Confidentiality protects business information; privacy protects personal information belonging to individuals.

Security Management Lifecycle Steps

1. Identify Threats, 2. Develop Policy, 3. Acquire/Implement Solutions, 4. Monitor Performance.

Core Nature of Security

Security is management, not just technology.

Employees' Role in Security

Employees can be either the greatest security strength or the weakest security link.

Time-Based Model Security Rule

P > D + R (Protection time must exceed Detection plus Response time).

Time-Based Model Variables (P, D, R)

Protection time, Detection time, and Response time.

Authentication vs Authorisation

Authentication verifies identity (who you are); authorisation determines permissions (what you can do).

Good Password Characteristics

Long, complex, random, and secret.

Multi-Factor Authentication Categories

Something you know, something you have, and something you are.

Device and Software Hardening Rule

Never leave systems in their default configuration.

Honeypots

Decoy systems designed to attract attackers.

CIRT Core Responsibilities

Recognising attacks, containing damage, recovering systems, and investigating causes.

Cloud Computing Security Challenges

Constant transmission, externally stored data, and dependence on cloud providers.

GDPR Data Breach Notification

Must be reported within 72 hours.

Encryption States Protected

Data at rest and data in transit.

Symmetric vs Asymmetric Encryption Keys

Symmetric uses the same key; asymmetric uses a public and private key pair.

Encryption vs Hashing Purpose

Encryption protects confidentiality and is reversible; hashing protects integrity and is not reversible.

Hashing Integrity Verification

If two hashes match, the document is unchanged.