CertiGuide to Security+  9  Chapter 0:  Read.Me

0.3  Security Tao 1 0.5  Security Through Obscurity

Regardless of physical or network considerations the following points need to be addressed. They are:

• Proof of identity (authentication).
  
  
• Access permissions (authorization).
  
  
• Eavesdropping prevention/encryption (confidentiality).
  
  
• Protection of information from modification (integrity).
  
  
• Proof of involvement (non-repudiation).
  
  
• Connectivity between parties (availability).

An effective overall security plan addresses these six issues. Typically this requires a collection of resources. A single element may offer more than one attribute. For example, strong encryption of data addresses both confidentiality and integrity. Other methods must be used to satisfy the other factors.

Physical security should be modeled with the same principles. Consider a system involving access cards without connectivity. This makes checking a centralized database (authorization) or logging access (non-repudiation) difficult at best.

Later chapters of this book provide more information about the items on this checklist.

Non-technical users should got to the footnote for an article on how to choose a password²³.

0.3  Security Tao 1 0.5  Security Through Obscurity