Information System Security

• Introduction

What is Information Security?

• The protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. In order to provide confidentiality, integrity, and availability.
• Information Security involves everything related to the information.

What is Information System Security?

• Information Systems Security is only related to the systems where system information resides.–
• E. g. Once an employee legally puts the data on a thumb drive it is no longer covered by Information System Security but by Information Security in general.
• Information Systems Security is a subset of Information Security.

Cyber Security

• The ability to protect or defend the use of cyberspace from cyber attacks
• Cyber security involves protecting the cyberspace by preventing, detecting, and responding to attacks.
• Cyberspace:


• The notional environment in which communication over computer networks occurs.

Computer Security

• Measures and controls that ensure confidentiality, integrity, and availability of information system assets Including hardware, software, firmware, and information being processed, stored, and communicated.
• The protection of computer systems from the theft or damage to the hardware, software or the information on them, as well as from disruption or misdirection of the services they provide.

Why Computer Security?

• On 11 February 2013, residents of Great Falls, Montana received the following warning on their television
• The perpetrator of this hoax was never caught, nor has it become clear exactly how it was done. Likely someone was able to access the system that feeds emergency broadcasts to local radio and television stations. In other words, a hacker probably broke into a computer system
• You encounter computers daily in countless situations.Sometimes you are not aware a computer is involved.
• These computers:
• Move money, control airplanes, monitor health, lock doors, heat buildings, regulate hearts, deploy airbags, direct communications, regulate traffic and do hundreds of other things that affect lives.
• Most of the time these computers work just as they should. But occasionally they do something horribly wrong.
• Information security was not a “hot topic” about 15-20 years ago
• Organizations did not heavily depend on computer systems for day-to-day activities
• Few people had the knowledge to operate computer systems.
• Internet was not there and not many networked computers
• Today:–


• Organizations, Governments and Individuals depend heavily on electronic information systems.
• The current era often referred to as the “information age”, has seen human beings generate, store and exchange information at an unprecedented rate.
• Many individuals have knowledge of computer systems and their operations.
• The internet provides a large medium for malicious activities.
• Organized computer crimes have become common.