Programming Based Security Arrangements And Information From Being Stolen

A computer is secure if you can depend on it and its software to behave as you expect I this assignment I will writer about how Linux provides security to you information. The major technical areas of computer security are usually represented by CIA confidentiality, integrity, and authentication or availability. It means that information cannot access by unauthorized people.

Security software limits access to programs and data files, and keeps a log of programs and files that have been accessed, which is then reviewed by the security manager daily.

For example a clerk will only be able to access a limited amount of information, such as inventory at each store. The limitations will be different for an accountant or the mangers. All information will be protected with several different layers of security. The first layers will be simple hardware protection for access to the network; from there the security will increase with password protection and restrictions to users. (Merkow & Breithaupt 2006)

As such, he introduces a technique of identifying a spectrum of potential vulnerabilities and suggests procedures to deal with them. Systems Specification and High Order Language Implementation are categorized as items of high risk to attacks. Security Policy and Machine Language Implementation are classified as items of moderate risk of being vulnerable to attacks. Circuits Electronics and Device Physics are of low and very low risks respectively. He also discusses potential threats such as deceiving operating systems to grant access to file or data to unauthorized users through direct (overt) and indirect (convert) channels. Walker also says that lack of precise definition of trusted operating systems and the higher cost of building them are the significant drawbacks faced by the vendors. Vendors are concerned that if they build trusted operating systems, they might not be accepted by their customers. The only solution suggested by the author was to have someone or a company builds it, shares the technology used, and convinces the general public on the significance of it. Once it becomes accepted, then there will be a widespread use of trusted computer operating systems.

The article, which addresses security loopholes in modern computing environments, by Loscocco et al highlights what is and has been being done security wise in the past and how secure these implementations were and going forward what should be done to ensure in depth security which guarantees system wide security (1998). The article first explains features of secure operating system and why current systems implemented under the notion of application space security ultimately failed to safe guard the integrity and confidentiality of our assets. The article then continued with general examples of access control and cryptography implemented in the application space with no or little support from operating system and showed their vulnerabilities to attacks such as tampering, bypassing and spoofing. The article supplied real-life examples to support the evidence that building security in the application space without secure operating system is meaningless. The article raised concrete examples on mobile code security, Kerberos network authentication service, IPSEC and SSL network security protocols and firewall. The paper finally put an interesting remark that security implemented in application space without secure operating system is like “building a house in a pile of sand” and it also emphasized that secure operating system without better security on the

Computers have become part of our daily complex lives; we depend heavily on computers to help break our complicated lives down. Most people now prefer to do things the digital way and so does companies. Most of trading (buying and selling) is now online which requires computers. In order to satisfy our hunger for digital living, there is a need for technology called the operating system to carry out the activities we require our computers to do. Computers and technology come in different forms and sizes and due to the capitalistic nature of our economy everyone is allowed to come up with their own form of computer and even the technology to run it. In recent years’ companies have gained interest doing business digitally and since software have become easier to write or code, it is also vulnerable- easy for programmers to access and exploit called hacking. Hackers are unapproved clients who break into a technological framework, change or decimate data, frequently by introducing hazardous malware without the insight and assent of the host company. Companies are now at risk of losing much more than money by doing business the digital way. It is in this view that the Security Exchange

When it comes to access control of computer systems, many of the same types of control systems mentioned above are also used along with passwords and encryption.

Information is the most valuable commodity that individuals and global corporations use to grow financially, economically, and independently. The protection and security of the information is essential. One of the most vital foundations of protection information is the authentication process. The authentication process is utilized to protect computer and network systems against various types of security threats, such as password-cracking tools, password dictionary attacks, mistreatment of user access rights, and any potential unauthorized attacked. Understanding how to authenticate users and the accessible information that is readily available on system networks can help prevent future issues as well as provide insight into the developmental process for new systems. In addition, authentication is simply determining whether someone or some machine is, in fact, who or what they declared there to be. This process directly reflects on and correlates to the readiness and ease of access to information and the protection of it.

The ' Data Protection Act' guide how personal data can be protected. The Act enable individual to access their own data. Challenge in case of misuse off their data and seek compensation, hence to protect data the act states some rules called ‘data protection principles’.

Information will be encrypted, so it cannot be read or understood. Information will be decrypted only by authorized individuals.

Thank you for responding to my discussion board post. You brought up an excellent point about using the proper tool for the job. In many case, depending upon the size of an organization and its information technology department, they may not properly use or implement the correct tools for the security task they want to complete or not utilize all of a systems or devices capabilities. This can also leave the devices that they implemented vulnerable.

Notwithstanding, ruptures of physical security can be completed with almost no specialized learning from an invader. In addition, mishaps and characteristic fiascos are a piece of regular life, and in the long haul, are inescapable. At the point when considering and inquiring about Information Security, there are diverse rings of security to consider. A standout amongst the most vital element to consider is physical security. One of the slightest specialized systems for data security misuse is the breaking of the physical security ring. Abusing the physical security of any organization requires negligible, if any, specialized learning from the gatecrasher.

Workman, M., Bommer, W. H., & Straub, D. (2008). Security lapses and the omission of information security measures: A threat control model and empirical test. Computers in Human Behavior, 24(6), 2799-2816

Security at hardware level is a new trend in security industry; it will accelerate the security at the processor and chip-set level (Vaquero, Rodero-Merino and Moran, 2011:112). Antivirus solution with Computers and Hardware will eliminate antivirus and Firewall security solutions industry. (Bruce Schneier accessed January/9 2013). Intel is planning to move computer security to the hardware level from its current software level, by incorporating security features onto their chips and processors (MEED 2010).This will also hit the IT Security devices market.

As we evolve through time the technology evolves with us. With our accomplishment in technology we reached beyond our imagination, some things which our ancestors would only dream on having. But while the technology can be used for good deeds some want to take advantage of it and gain personal profits. So, countermeasures were created for defending against them. The system security is a defence mechanism projection against illegal access in a User’s/Owner’s computer or other technology gadgets that contain personal information without the Owner being aware. The system security covers Networking Protection which is an accidental downloading of software codes like computer viruses, spam, worms, Trojan horses, logic bombs, spyware, and adware, that create an annoyance, steals, harms or alters data or cripple system capacities. In the meantime, it also covers Physical Protection preventing others to steal or access your personal gadgets. Programs for protection have been created for a long time and are still being created for the cause of fighting the threatening programs. The battle of anti-threatening