Why Information Security: D-UH!

February 8, 2011 · Posted in Information Security, Information Systems · Comment 

 I almost always feel like saying “D-uh!” every time I see a text heading for an article or book topic that says “Why information security” or “Why Security”.  I feel that it is almost a nonsensical question as “why do I need to breathe”. However, stepping back and looking at the big picture, that is really a wrong assumption. It is almost an internal bias that akin to me being surprised at meeting someone who still doesn’t have an e-mail or a broadband connection. It boggles my mind that in this day and age of information security exploits and regulatory liabilities, I still meet programmers and developers who still continue to spit out commercial products that are filled with so many holes that a 13-year old script kiddie can easily slice through it like it was Swiss cheese.

That being said, the nature of my profession makes me a little bit more attuned to information security issues than perhaps the next guy (maybe not guys sitting right next to me as I write this considering that they do the same work as I do, but perhaps the next guy in the mall or something) and whether I like it or not it becomes part of my nature. To me, thinking about threat, vulnerabilities and risks is about as natural as breathing. This fact, however, is not true to majority of digital innovators and users out there. Read more

Tags: <, , , , , , , >

CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Remote Access Security Management

November 24, 2009 · Posted in Information Security, Information Systems · Comment 

Key Concepts:

  • Confidentiality – no disclosure of data
  • Integrity – no alteration of data
  • Availability – no destruction of data

Common Remote Connections

  • xDSL – Digital Subscriber Line
  • Cable Modem
  • Wireless
  • ISDN – Integrated Services Digital Network

Common Tools in Securing External Remote Connections

  • VPN – Virtual Private Network
  • SSL – Secure Socket Layer
  • SSH – Secure Shell Read more

Tags: <, , , , , , , , , , >

CISSP Note (Domain 1: Access Control): C.I.A. – Quick Definitions

November 16, 2009 · Posted in Information Security · Comment 

Information Security has three key focus ensuring the Confidentiality, Integrity and Availability of information, commonly known as C.I.A. Below are their definitions.

Confidentiality – ensure that information is not disclosed to unauthorized person

Integrity

  • Prevention of modification by unauthorized users
  • Prevention of unauthorized changes by otherwise authorized users
  • Internal and external consistency
    • Internal consistency within the system (i.e. within a database the sum of subtotals is equal to the sum of all units)
    • External consistency – database with the real world (i.e. database total is equal to the actual inventory in the warehouse)

Availability – ability of authorized personnel to access information on time and as necessary Read more

Tags: <, , , , , , >

Get Adobe Flash playerPlugin by wpburn.com wordpress themes