The need for computer security arose during World War II: When the first mainframes, developed to aid computations for communication code-breaking were put to use. That is the need to secure physical locations, hardware, and software from threats
Multiple levels of security were
implemented to protect these mainframes and maintain the integrity of their
data. Access
to sensitive military locations, for example, was controlled by means of
badges, keys, and the facial recognition of authorized personnel by security
guards.
During these early years, Information
security was a straightforward process composed mainly of physical security, and simple document classification schemes, primary threats to security were physical theft of equipment, espionage against
the products of the systems, and sabotage.
One of the first documented security
problems that fell outside these categories occurred in the early 1960s. When
a systems administrator was working on a MOTD (message of the day) file, and
another administrator was editing the password file. A
software glitch mixed the two files, and the entire password file was printed
on every output file.
The 1960s: During the Cold War, many more mainframes were brought online to accomplish more
complex and sophisticated tasks. It
became necessary to enable these mainframes to communicate via a less
cumbersome process than mailing magnetic tapes between computer centers–In
response to this need, the Advanced Research Project Agency (ARPA) began
examining the feasibility of a redundant, networked communications system to
support the military’s exchange of information. Larry
Roberts, known as the founder of the Internet, developed the project which was
called ARPANET
The 1970s and 80s: During
the next decade, ARPANET became popular and more widely used, and the potential
for its misuse grew.In
December of 1973, Robert M. “Bob” Metcalfe, who is credited with the
development of Ethernet, one of the most popular networking protocols,
identified fundamental problems with ARPANET security.
ARPANET Insecurity: Individual
remote sites did not have sufficient controls and safeguards to protect data
from unauthorized remote users. The vulnerability of password structure and formats. Lack
of safety procedures for dial-up connections. Nonexistent
user identification and authorization to the system.
MULTICS: Much
of the early research on computer security centered on a system called
Multiplexed Information and Computing Service (MULTICS).It was the first operating system
to integrate security into its core functions.It
has multiple security levels and passwords. It was a mainframe, time-sharing
operating system.
The 1990s: Internet
was made available to the general public. Having
previously been the domain of government, academia, and dedicated industry
professionals. The Internet
has become an interconnection of millions of networks.At
first, these connections were based on de facto standards because industry standards for the interconnection of networks did not exist at that time. These
de facto standards did little to ensure the security Information.
2000 to Present: Today,
the Internet brings millions of unsecured computer networks into continuous
communication with each other. The
security of each computer’s stored information is now contingent on the level
of security of every other computer to which it is connected. Recent
years have seen a growing awareness of the need to improve information
security, as well as a realization that information security is important to
national defense.
Comments
Post a Comment