DACS 2201 / 01-INTRODUCTION TO SECURITY

Practice flashcards covering the core concepts of information security, the CIA triad, data states, and cybersecurity countermeasures based on the Lecture 01 transcript.

Information security

The tasks of securing digital information whether it is manipulated by a microprocessor, preserved on a storage device, or transmitted over a network.

CIA Triad

The three types of information protection which provide focus for cybersecurity specialists: Confidentiality, Integrity, and Availability.

Confidentiality

Protecting data from those who are not authorized to view it, or keeping secret data secret.

Integrity

Also called quality, it is the accuracy, consistency, and trustworthiness of data during its entire life cycle, involving the prevention of unauthorized or undesirable alterations.

Availability

The ability to access data whenever it is needed.

Denial of service attack (DOS)

An attack where an attacker sends a larger number of fake requests to slow or shut down a server, preventing it from responding to legitimate requests.

Data at rest

A state where a type of storage device retains data when no user or process is using it.

Direct-attached storage (DAS)

Storage connected to a computer, such as a hard drive or USB flash drive.

RAID

Redundant array of independent disks, a technology used for centralized storage on a network.

NAS

Network attached storage, a technology used for centralized network storage.

SAN

Storage area network, a central network technology for data storage.

Data in transit

Data being sent from one device to another, mostly over a wired or a wireless network, such as web forms or emails.

Data in process

Data being currently used and processed by a user or a process, such as a file being edited.

Security policy

A set of security objectives that includes rules of behavior for users and administrators.

Standards

Rules that help IT staff maintain consistency in operating the network.

Guidelines

A list of suggestions on how to perform tasks more efficiently and securely.

Procedure documents

Documents including implementation details that usually contain step-by-step instructions and graphics.

The Cybersecurity Cube

A process that achieves protection by combining the CIA triad, the states of data, and security countermeasures.

Security trade-offs

The balance between security and competing interests such as convenience, usability, performance, and cost.

Attendance Rule

The policy stating that records made before $5\,\text{minutes}$ of the start are ignored, and arriving more than $10\,\text{minutes}$ late results in a recorded absence.