Preserving confidentiality, integrity, and availability of data (and services) is one (defender-centric) traditional formulation of the security problem. Another is a more attacker-centric formulation where we are concerned about preventing interruption, interception, modification, and fabrication. How do the last four concepts related to the first three? That is, is any of the four equivalent to one of the three? Is one of the three encompassed by one or more of the four? Are there any concerns that are inside the scope of one formulation but ignored by the other? Which is a more useful framework and why?

Preserving confidentiality, integrity, and availability of data (and services) is one (defender-centric) traditional formulation of the security problem. Another is a more attacker-centric formulation where we are concerned about preventing interruption, interception, modification, and fabrication. How do the last four concepts related to the first three? That is, is any of the four equivalent to one of the three? Is one of the three encompassed by one or more of the four? Are there any concerns that are inside the scope of one formulation but ignored by the other? Which is a more useful framework and why?

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter7: Security Technology: Intrusion Detection And Prevention Systems, And Other Security Tools

Section: Chapter Questions

Problem 3CEDQ

See similar textbooks

Similar questions

What does the term "security" mean in the context of information and communication technologies? In your opinion, what are some of the most pressing concerns regarding physical security today? Organizations can be attacked in a variety of ways, each appropriate to the specifics of the target.
One common description of the security issue (from the perspective of the defender) is the preservation of the confidentiality, integrity, and availability of data (and services). From the attacker's point of view, it is possible to conceive about interruption, interception, modification, and creation in many ways. Is there any relationship between the last four ideas and the first three concepts mentioned? Is there a match-up between any of the four and any of the other three players? If so, does one or more of the four include at least one of the three? Is there anything that comes within the purview of one formulation but not the other, and vice versa? Which framework is more advantageous, and why is this so?
First, argue for the best information security practice, whether a block cipher or stream cipher should be used to encrypt a video data file sent through the internet as part of a major, successful entertainment service. The entertainment company has a large market share, and ample resources. Secondly, argue for the most secure choice of which kind of cipher should be used for the authentication exchange between the user and the entertainment service web portal. The entertainment service is expensive to the customer, and users are wary of the misuse of their accounts. Consider the nature of the traffic and its pattern, and the nature of the keys to use.
In other words, what is SANS' official goal? What part does it play, more specifically, in the process of certifying professionals in the field of information security?
A recent incident involving a security weakness in authentication or access control may make for a fascinating topic for a case study if it was written up. Is there going to be a change in the way that the company functions as a consequence of this? I was wondering if you would mind if I inquired about the loss history of the firm and, if so, what those losses consisted of.
To better understand the importance of access control and authentication, it might be instructive to examine a real-world case study of a recent security incident involving these topics. Do you think it has changed the way the firm does business? Can you tell me whether or whether the firm has suffered any losses, and what those losses were?
This essay aims to delineate, juxtapose, and analyze two distinct security architectural models in order to discern their similarities and differences?
In what ways and to what extent does physical security differ from other types of security? We must be aware of the most pressing physical security risks that exist today. How do they market themselves to the general public, and how are their assaults on the organisation profitable?
In your opinion, which forms of information security are paramount? What security measures should be taken when both data and user authentication are at risk?
Could you please provide a more precise definition of the term "authentication objectives"? Conduct an analysis of various authentication techniques and evaluate their respective advantages and disadvantages through a comparative and contrasting approach.
Could you please provide a more precise definition of the term "authentication objectives"? Conduct an analysis of various authentication techniques and evaluate their respective strengths and weaknesses through a comparative and contrasting approach.
Describe the most important features of information in your own words. What role do they play in the field of computer security research?