Lecture Notes: Security Principles The five fundamental principles of security are: 1. Confidentiality: ○ Ensures that information is accessible only to authorized individuals. ○ Prevents unauthorized disclosure of data. 2. Integrity: ○ Guarantees that data is accurate, complete, and unaltered. ○ Protects against unauthorized modifications or deletions. 3. Availability: ○ Ensures that authorized users can access information and resources when needed. ○ Prevents disruptions to services or systems. 4. Authentication: ○ Verifies the identity of users or devices before granting access. ○ Prevents unauthorized access. 5. Non-Repudiation: ○ Proves that a specific party was involved in a transaction or action. ○ Prevents parties from denying their involvement. Types of Attacks Attacks can be categorized into two main types: ● Passive Attacks: Do not modify the content of the original message but aim to eavesdrop or intercept it. ● Active Attacks: Involve modifying the content of the original message to deceive or harm recipients. Key Security Goals ● ● ● ● ● Confidentiality: Prevent unauthorized disclosure of data. Integrity: Ensure data is accurate and unaltered. Availability: Ensure systems and services are accessible to authorized users. Authentication: Verify the identity of users and devices. Non-Repudiation: Prevent parties from denying their involvement in a transaction. By understanding and implementing these security principles, organizations can protect their valuable assets and mitigate the risks of security breaches.