Introduction

Information Security: “A well-informed sense of assurance that the information risks and controls are balanced.

History of Information Security

• Began immediately after the first mainframes were developed
• Created to aid code-breaking computations during World War II
• Advanced Research Procurement Agency (ARPA) began to examine the feasibility of redundant networked communications.
• 1960s: ARPANET is the first Internet.
  • ARPANET grew in popularity as did its potential for misuse
    • Fundamental problems with ARPANET security were identified
      • No safety procedures for dial-up connections to ARPANET
      • Non-existent user identification and authorization to the system.
• Information security began with Rand Report R-609 (the paper that started the study of computer security)
• The scope of computer security grew from physical security to include
  • Safety of data
  • Limiting unauthorized access to data
  • Involvement of personnel from multiple levels of an organization
• Late 1970s: Microprocessors expanded computing capabilities and so did the security threats
• The 1990s
  • The Internet became the first manifestation of a global network of networks
  • In early internet deployments, security was treated as a low-priority
• The Present
  • The Internet brings millions of computer networks into communication with each other — many of them unsecured
  • The ability to secure a computer’s data is influenced by the security of every computer to which it is connected

What is Security?

• The quality or state of being secure — to be free from danger
• A successful organization should have multiple layers of security in place
  • Physical security
  • Personal security
  • Operations security
  • Communications security
  • Network security
  • Information security

What is Information Security?

• The protection of information and its critical elements, including systems and hardware that use store, and transmit that information
• Necessary tools: policy, awareness, training, education, technology
• C.I.A. triangle was standard based on confidentiality, integrity, and availability

Critical Characteristics of Information/ Principle of IS