CIA Triad Model

Confidentiality is the protection of information from unauthorized access. This is the assurance that information provided has not been made known to unauthorized persons, processes or devices. The application of this security service suggests information labeling and need-to-know imperatives are core aspects of the system security policy. Information, in today’s world, has value and everyone has information they wish to keep secret. Information such as credit card details, trade secrets, personal information, government documents, and many more. It was stated (Securitas Operandi™, 2008) that, we are bound to keep many secrets – corporate, staff, and personal secrets. We must keep this confidential information under wraps and earn the trust of employers, colleagues, and regulators every day. Mechanisms to enforce this include cryptography, which is, encrypting and decrypting data, access controls such as

With the Age of technology advancing, the more cyber-attacks are occurring. Many of our information are on computer networks and we like to think that our information is well protect. But how protected is our information? Cybersecurity bills are introduced in Congress almost every year. These bills regularly imply to permit organizations and the government to divulge dangerous information for a “cybersecurity” reason to secure and safeguard against attacks against networks and computer systems.

As we continue to rely more on technology, it is important to mitigate the security risks that come with

2. Explain the CIA triad. For each part of the triad, outline attacks on a database and possible protections

Confidentiality is the privacy measures taken place to ensure information is kept away from certain people while available to others that are authorized. Examples of methods used include data encryption, biometric verification, security tokens, soft tokens, key fobs, and the most commonly used user ID and password. More extreme measure are taken for more important or dangerous information.

“110 million Americans saw their identities compromised in 2014” Gault argues, adding that 110 million is one in every two Americans (2). With new technological inventions, such as the cloud, which allows remote access to stored information, there are “too many vulnerabilities hackers can exploit” (Gault 7). Cybersecurity has been breached due to the lack of integrity in the system. There is an acute focus on encryption in the industry with the belief that it is the key in ensuring confidentiality and ultimately, cybersecurity. Meanwhile, the industry “rarely” addresses integrity (Gault 17). Gault firmly argues that “the system is broken” because of the lack of integrity in the system. Confidentiality, while important, is not integral in preventing and providing solutions for data breach and theft. The current system solution for cybersecurity threat is dominated by a “lock-and-key system”; preventative, but once access is achieved, accessibility becomes much more effortless for others (Gault 21). Gault suggests an integrity solution that acts more “like an alarm”, a method focused on monitoring suspicious activity on online databases and platforms that then sends an alert when suspicious activity is detected. (22). Gault argues the loss of integrity is apparent in the cybersecurity industry because of the method in which prevents unauthorized access and thievery does not include elements of integrity. The

The key characteristic of the information security CIA triad I will focus on is confidentiality. Confidentiality is an important part of any organization’s business operations and every precaution must be taken to safeguard information so that it doesn’t get into the wrong hands. In today’s world of career hackers and large, cybercriminal organization, nothing should be left to chance. Information that can be sold on the black market that includes people’s social security numbers or credit card numbers is highly targeted. In addition to financial information, medical records and government documents are also highly sought after by criminals. Organizations should implement the use of technology to restrict access to this valuable information. One such method to deter hackers is the use of encryption. Encryption is simply the process of encoding data into another form, called ciphertext so that hackers cannot read, alter or gain access to it. This creates a layer of protection so that the information can be deciphered only by the authorized parties. The goal of using an encryption system is to protect the privacy of any digitally stored data on a computer system or data transmitted through the internet. Encryption can help protect systems fight viruses and malware that can be used to gain access to private

When developing an information system that will hold private and vital informations, it is necessary to think of protecting those data. The security of information is concerned with the following areas: confidentiality, data integrity, availability, authenticity, non-repudiation and risk management. All these security aspects, may be affected by purely technical issues (e.g., a malfunctioning part of a computer or communications device), natural phenomena (e.g., wind or water), or human causes (accidental or deliberate).This report will give a definition of these security issues with examples to illustrate them.

Cyber security includes ensuring the data, frameworks we depend on consistently—whether at home, work or school. Consider the amount of your own data is put away either all alone PC or on somebody else 's framework. How is that information and the frameworks on which that information lives (or is transmitted) kept secure? The expanding volume and modernity of digital security threats–including focusing on phishing tricks, information robbery, and other online vulnerabilities–demand that we stay cautious about securing our frameworks and data. The normal unprotected associated with the Internet can be hacked in minutes. A great deal of computers and website pages are being found with viruses each day. New hacking strategies are invented constantly. These are only a couple case of hacking we hear about and they highlight the significance of data security as an essential way to deal with securing information and frameworks.

“The protection of an organization’s information assets relies at least as much on people as on technical controls, but technical solutions, guided by policy and properly implemented, are an essential component of an information security program.” (Whitman, 2012, p.293). The System/Application Domain is the most valuable resource within the seven domains of a standard IT infrastructure. In fact, it can be intellectual property, private customer data or national security information. Data is what attackers seek deep within an IT system. Truly, safeguarding this information is the goal of every organization as loss of data is the greatest threat in the System/Application Domain. The more important the data, the more secure and encrypted it

A database’s confidentiality associates with the protection of data information from being disclosed to unauthorized parties. Users who are given access to the data should be able to view certain data according to their given authority. For example, an employee should not be able to see the salaries of their managers however the managers should be able view an employee’s criminal history. A loss of confidentiality means that the data or system is unsecure and unauthorized personnel have the ability to transfer or leak any unsecured data. A method to thwart this threat is through data encryption. This security option uses mathematical algorithms to render a network message unreadable to unauthorized users. The encoding of the data becomes protected and the only way to gain access to the data is through a decryption key. Encryption prevents unauthorized users from reading encrypted data and prevents data leakage.

Abstract. This paper is on Cryptography. Cryptography is the art of writing and solving secret messages. People have been using the encoding and decoding of messages with pen and paper since ancient times. Cryptography has played an enormous role in human history as it was used in times of war. With the demand of today’s world of online security, digital Cryptography is in great demand to help people protect valuable information. This paper will focus on the brief history of Cryptography.

With the advancement of technology, threat to information security and data security also get increases. Many times information and data are confidential in case of corporate field, bank and military intelligence. On the other hand with the increasing number of

This paper proposes, various methods for anonymous authentication for data stored in cloud. Cloud verifies the authenticity of the series without knowing the user’s identity before storing data. This paper also has the added feature of access control in which only valid users are able to decrypt the stored information. These schemes also prevents replay attacks and supports creation, modification, and reading data stored in the cloud. Moreover, our authentication and access control scheme is decentralized and robust, unlike other access control schemes designed for clouds which are centralized. The communication, computation, and storage overheads are comparable to centralized approaches .The aim of this paper is to cover many security issues arises in cloud computing and different schemes to prevent security risks in cloud.

Cryptography is defined as the art or process of writing in or deciphering secret code: any system of secret writing. Encryption is used in electronic systems to achieve privacy and authentication of information. The privacy requires, two questions need to be answered: what are the consequences of unauthorized access to or disclosure of the valuable information, and how often the possibility of unauthorized access to or disclosure of information. Authentication addresses the issues of whether data is from the correct source or if it has been unauthorized with. Functions embedded with in cryptographic systems help ensure data integrity by guaranteeing authenticity of a message and allowing the use of digital signature, a data block attached to a message that binds the message to a sender so that it can be verified by the receiver or others.