Computer Security - Invalid URL计算机安全的URL无效.pptVIP

Computer Security CIS326 Dr Rachel Shipsey This course will cover the following topics: passwords access controls symmetric and asymmetric encryption confidentiality authentication and certification security for electronic mail key management The following books are recommended as additional reading to the CIS326 study guide Computer Security by Dieter Gollman Secrets and Lies by Bruce Schneier Security in Computing by Charles Pfleeger Network Security Essentials by William Stallings Cryptography - A Very Short Introduction by Fred Piper and Sean Murphy Practical Cryptography by Niels Ferguson and Bruce Schneier There are also many websites dealing with the subjects discussed in this course.For example, the following website provides links to a large number of sites who have security and cryptography course on-line:/courses.html What is Security? Security is the protection of assets. The three main aspects are: prevention detection re-action Some differences between traditional security and information security Information can be stolen - but you still have it Confidential information may be copied and sold - but the theft might not be detected The criminals may be on the other side of the world Computer Security deals with the prevention and detection of unauthorised actions by users of a computer system. There is no single definition of security What features should a computer security system provide? Confidentiality The prevention of unauthorised disclosure of information. Confidentiality is keeping information secret or private. Confidentiality might be important for military, business or personal reasons. Integrity Integrity is the unauthorised writing or modification of information. Integrity means that there is an external consistency in the system - everything is as it is expected to be. Data integrity means that the data stored on a computer is the same as the source documents. Availability Information should be accessible and useabl