Security concepts

When a person tries to discreetly steal your information by watching you input input it

• Eavesdropping

• Phishing

• Shoulder Surfing

• Spam

Ensuring that data remains always accesible

• Integrity

• Encrypting

• Confidentiality

• Availability

Setting barriers that prevent unidentified users from accessing resources

• Authorization

• Authentication

• Sanitation

• Segmentation

Coaxing information out of people with manipulation

• Spam

• Stealthing

• Snooping

• Social Engineering

Ensuring that not authorized users cannot access data

• Accounting

• Decryption

• Cyphers

• Confidentiality

Keeping tabs on who accesses resources and when

• Accounting

• Availability

• Authentication

• Monitoring

The principle that there must always be evidence archiving any and every action an user does

• Accounting

• Non-repudiation

• Implicit deny

• Authentication

Have the users prove their identity with unique identifications

• Accounting

• Social Engineering

• Authentication

• Identity Fraud

The principle that access must be inherently blocked to unauthenticated users

• Implicit deny

• Least privilege

• Non-repudiation

• Confidentiality

Ensuring the data remains accurate and reliable at all times

• Accounting

• Authentication

• Availability

• Integrity