lec1-Computer Security concept

COMPUTER SECURITY CONCEPTS
A Definition of Computer Security
The NIST Computer Security Handbook [NIST95] defines the term computer security as follows:
Computer Security: The protection afforded) توفرها )to an automated information system in order to achieve the applicable objectives of preserving the integrity, availability, and confidentiality of information system resources (includes hardware, software, firmware, information/data, and telecommunications).
This definition introduces three key objectives that are at the heart of computer
security:
• Confidentiality سرية : This term covers two related concepts:
— Data confidentiality: Assures that private or confidential information is not made available or disclosed to unauthorized individuals.
— Privacy خصوصية : Assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed.
• Integrity سلامة : This term covers two related concepts:
— Data integrity: Assures that information and programs are changed only
in a specified and authorized manner.
— System integrity : Assures that a system performs its intended function in an unaffected manner , free from deliberate الاعتمادية or unauthorized
manipulation معالجة of the system.
• Availability توفر : Assures that systems work immediately and service is not denied to authorized users.
These three concepts form what is often referred to as the CIA triad