These
three key principles should guide all secure systems. CIA also provides a measurement tool for security
implementations. These principles are applicable across the entire spectrum of security analysis??”from access,
to a user's Internet history, to the security of encrypted data across the Internet. A breach of any of these three
principles can have serious consequences for all parties concerned.
Figure 1-2. The CIA Triad
Confidentiality
Confidentiality prevents unauthorized disclosure of sensitive information. It is the capability to ensure that the
necessary level of secrecy is enforced and that information is concealed from unauthorized users. When it
comes to security, confidentiality is perhaps the most obvious aspect of the CIA triad, and it is the aspect of
security most often attacked. Cryptography and encryption methods are examples of attempts to ensure the
confidentiality of data transferred from one computer to another. For example, when performing an online
banking transaction, the user wants to protect the privacy of the account details, such as passwords and card
numbers. Cryptography provides a secure transmission protecting the sensitive data traversing across the
shared medium.
Pages:
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53