1. goals of Information Security
1.1. Confidentiality
1.2. Integrity
1.3. Availability
2. Roles of the Information Security organizations
2.1. CERT/CC
2.1.1. The CERT Coordination Center (CERT/CC) is a reporting center for Internet security issues.
2.1.2. The CERT/CC plays a major role in coordinating responses to Internet security threats
2.2. US-CERT
2.2.1. United States Computer Emergency Readiness Team (US-CERT)
2.2.2. to protect the nation’s Internet infrastructure by coordinating defense against and responses to Internet security threats
2.3. SANS Institute
2.3.1. The SysAdmin, Audit, Network, Security (SANS)
2.3.2. develops and maintains research documents about various aspects of information security.
2.4. (ISC)2
2.4.1. International Information Systems Security Certification Consortium
2.4.2. nonprofit organization that maintains a collection of industry best practices for information security.
2.5. Common Criteria
2.5.1. an international standard for evaluating IT security.
2.6. FIPS
2.6.1. Federal Information Processing Standard
2.6.2. specifies security requirements for cryptographic modules
2.7. ICSA
2.7.1. International Computer Security Association
2.7.2. increase awareness of the need for computer security and to provide education about various security products and technologies
3. Issues of on-line security
3.1. Internet services
3.1.1. Electronic Mail and news
3.1.2. File transfer
3.1.3. Remote Access to hosts
3.1.4. Real time conferencing services
3.2. Terminologies
3.2.1. Information theft
3.2.2. Unauthorized disclosure
3.2.3. Information warfare
3.2.4. Accidental data loss
4. guuyfuyfuyfu
4.1. m j mbh
5. Information Security Definition
6. Areas in Information Security
6.1. Physical Security
6.2. Operational Security
6.3. Management and Policies
7. Security threats
7.1. Categories
7.1.1. data disclosure
7.1.1.1. Exposure of data to third parties. Key point to consider is whether the disclosure is relevant and necessary.
7.1.2. data modification
7.1.2.1. A modification attack is an attempt to modify information that an attacker is not authorized to modify.
7.1.3. data availability
7.1.3.1. Describe products and services that continues to be available at a required level of performance in situations ranging from normal through "disastrous."
7.2. Activities
7.2.1. hacking
7.2.1.1. hacking is the process of bypassing computer safeguards in order to gain access to them – which can either be good or bad –
7.2.2. cracking
7.2.2.1. cracking specifically refers to hacking practice, but with criminal intent.
7.2.3. spoofing
7.2.3.1. spoofing attack is when a malicious party impersonates another device or user on a network in order to launch attacks against network hosts, steal data, spread malware or bypass access controls
7.2.4. sniffing
7.2.4.1. Sniffing involves capturing, decoding, inspecting and interpreting the information inside a network packet on a TCP/IP network.
7.2.4.2. he purpose is to steal information, usually user IDs, passwords, network details, credit card numbers, etc.
7.2.4.3. Generally referred to as a “passive” type of attack, wherein the attackers can be silent/invisible on the network.
7.2.4.4. This makes it difficult to detect, and hence it is a dangerous type of attack.