| This contest is fueled by the following news: |
| | The world's largest software manufacturer, Microsoft, has warned (on Tuesday) that a trio of critical rated flaws in the Windows operating system could permit hackers to sneak around in a personal computer and swipe sensitive data. A security warning was announced as part of the monthly Microsoft security bulletin. There is a software patch that is designed to fix the problem. Microsoft is urging its own customers to take advantage of the Windows Update Service to obtain necessary security patches and have them installed automatically.
Information security — protection of information, ensuring its formation, use and development in the organization and enterprise.
Definitions:
While information security is security of information, information protection is activity to prevent leak of protected information, unauthorized and unintended access of protected information, i.e, process, directed towards achievement of information security.
Criteria of information security:
Often, model from three categories is cast as standard security model:
* Confidentiality;
* Integrity;
* Availability.
Information access to specific persons is understood under confidentiality and guarantee of information existing in initial form is integrity and possibility of accessing the information to authorized user at required time is understood under availability.
Other security model categories also exist:
* Authenticity — possibility of setting up information author;
* Authorization Appeal — Possibility to prove that the author is the same person, who claimed to be and none other than him.
Standards in the field of information security:
* BS 7799-1:2005 — British standard BS 7799 first part. BS 7799 Part 1 — Code of Practice for Information Security Management (practical rules for management of information security) 127 control mechanisms, required for designing information security management system for an organization, defined on the basis of best examples of best practices in given area. This document serves as practical handbook for creation of ISMS.
* ISO/IEC 17799:2005 — “Information technologies — Security technologies — Practical rules for management of information security”. International standard, which is based on BS 7799-1:2005.
Information security is a security of national interests in information sphere, defined by balanced set of personal interests, society and the state. |
|
|
|
|
|
