The term computer security The
term computer security is used frequently, but the content of a computer is
vulnerable to few risks unless the computer is connected to other computers on
a network. As the use of computer networks, especially the Internet, has become
pervasive, the concept of computer security has expanded to denote issues
pertaining to the networked use of computers and their resources. The
major technical areas of computer security are usually represented by the initials
CIA: confidentiality, integrity, and authentication or availability.
Confidentiality means that information cannot be access by unauthorized
parties. Confidentiality is also known as secrecy or privacy; breaches of
confidentiality range from the embarrassing to the disastrous. Integrity means
that information is protected against unauthorized changes that are not
detectable to authorized users; many incidents of hacking compromise the
integrity of databases and other resources. Authentication means that users are
who they claim to be. Availability means that resources are accessible by
authorized parties; "denial of service" attacks, which are sometimes
the topic of national news, are attacks against availability. Other important
concerns of computer security professionals are access control and
nonrepudiation. Maintaining access control means not only that users can access
only those resources and services to which they are entitled, but also that
they are not denied resources that they legitimately can expect to access.
Nonrepudiation implies that a person who sends a message cannot deny that he
sent it and, conversely, that a person who has received a message cannot deny
that he received it. In addition to these technical aspects, the conceptual
reach of computer security is broad and multifaceted. Computer security touches
draws from disciplines as ethics and risk analysis, and is concerned with
topics such as computer crime; the prevention, detection, and remediation of
attacks; and identity and anonymity in cyberspace. While
confidentiality, integrity, and authenticity are the most important concerns of
a computer security manager, privacy is perhaps the most important aspect of
computer security for everyday Internet users. Although users may feel that
they have nothing to hide when they are registering with an Internet site or
service, privacy on the Internet is about protecting one's personal
information, even if the information does not seem sensitive. Because of the
ease with which information in electronic format can be shared among companies,
and because small pieces of related information from different sources can be
easily linked together to form a composite of, for example, a person's
information seeking habits, it is now very important that individuals are able
to maintain control over what information is collected about them, how it is
used, who may use it, and what purpose it is used for.