ICT287 Exam Notes: (Unit Review and PASS Study Notes)

Exam > ICT287 Exam Notes: (Unit Review and PASS Study Notes)

Murdoch University ICT ICT 287 Topic 1: Introduction to Computer Security • Explain dimensions of security: securing data in transit and rest, network security, physical security, secure coding and application development ‘ 1. Securing data in transit and rest: data that is being sent from one place to another must be secured so ...[Show More]

Murdoch University
ICT
ICT 287
Topic 1: Introduction to Computer Security

• Explain dimensions of security: securing data in transit and rest, network security,

physical security, secure coding and application development ‘

1. Securing data in transit and rest: data that is being sent from one place

to another must be secured so that the data is whole, not tampered in any

way as well as not being spied or monitored on by unauthorized parties;

additionally, data that is stored in a virtual or physical location must also be

secured so that it is not tampered in any way and accessed by

unauthorized parties

2. Network security: the process of taking physical and software

preventative measures to protect networking infrastructure from

unauthorized access, misuse, malfunction, modification, destruction, or

improper disclosure to creating a secure platform for computers, users and

programs to perform their permitted critical functions within a secure

environment.

3. Physical security of personnel and equipment: there is a need to

protect tangible assets such as personnel and equipment as the former

are the ones who implement computer security controls and the latter are

the infrastructure in which the security controls are implemented; physical

security includes locking of rooms, physical access control of certain areas

such as server rooms, etc.

4. Secure coding and application development: security allows software

development to be done in a conducive environment as security provide

assurance that data and information captured, stored, used, retrieved and

deleted are properly managed; in the end security enables high quality

software to be developed

• Name and explain the 3 core principles (CIA) and explain why often there is

some prioritisation of these

The 3 core principles are Confidentially, Integrity, and Availability (CIA)

1. Confidentiality: helps prevent unauthorized disclosure of data. It uses

multiple methods like authentication combined with access control and

cryptography.

2. Integrity: provides assurances that data has not been modified, tampered

with or corrupted. Ideally, only authorized users modify data. However, if

there are unauthorized or unintended changes occur, that can be from

unauthorized uses or through systems or human error, hence, the data

has lost integrity.

3. Availability: ensures that data, services and systems are available and

operational for legitimate users when needed. Common goals of fault

tolerance and redundancy techniques is to remove single points of failure

(SPOF)