信息安全基础概念与原则

需积分: 7 51 浏览量更新于2024-07-18 收藏 1.21MB PDF 举报

"本资料主要涵盖了基础安全概念，包括信息安全的原则描述以及良好安全架构的解释，并设有快速复习和自我测试环节，旨在帮助学习者理解并掌握信息安全管理的基础知识。" 在IT领域，安全是至关重要的一个方面。"基础安全概念"是所有IT专业人员都需要理解和掌握的核心知识。这部分内容主要围绕两个认证目标展开： 1.01 描述信息安全原则：信息安全原则是保护数据和系统免受恶意攻击、未经授权访问或数据泄露的基础。信息安全的定义可能因人而异，但普遍接受的经典定义是：信息安全是指信息的机密性、完整性和可用性。这三要素通常被称为"CIA三元组"。 - **机密性**（Confidentiality）：确保信息只被授权的个人或实体访问，防止敏感信息泄露给未经授权的个人或组织。 - **完整性**（Integrity）：保证信息的准确性和完整性，防止数据被篡改或破坏，确保数据在存储和传输过程中的正确性。 - **可用性**（Availability）：确保信息在需要时能够及时、可靠地访问，防止服务被拒绝或系统瘫痪。 1.02 解释信息安全基础并定义良好的安全架构：良好的安全架构是设计和实施各种安全机制和控制的基础，无论硬件平台、操作系统或应用程序如何。构建安全架构时，需要考虑以下几个关键点： - **风险评估**：识别和评估可能威胁到信息系统的风险，以便制定相应的缓解策略。 - **访问控制**：通过权限管理确保只有经过身份验证和授权的用户可以访问资源。 - **加密**：使用密码学技术对数据进行编码，以保护其在传输和存储过程中的安全。 - **审计与监控**：记录和分析系统活动，以便检测异常行为和潜在的入侵。 - **灾难恢复与业务连续性**：规划应对灾难事件的策略，确保关键业务能在突发事件后迅速恢复。 - **法规遵从性**：确保系统和操作符合相关法律法规的要求，如GDPR、HIPAA等。 - **安全培训与意识**：提高员工的安全意识，减少因人为错误导致的安全漏洞。通过"两分钟 drill"和"Q&A 自我测试"环节，学习者可以快速复习这些概念并检验自己的理解程度，以确保对信息安全基础知识的牢固掌握。这些基本概念不仅适用于特定的硬件、操作系统或应用环境，而是贯穿于整个信息技术领域，是所有IT专业人士必须具备的知识基础。

展开

Chapter 1: Fundamental Security Concepts

CertPrs8/Sun Certiﬁed Security Administrator for Solaris 9 & 10 Study Guide/Chirillo and Danielyan/225423-8/Chapter 1

What You Are

What you are authentication refers to biometric authentication methods. A biometric

is a physiological or behavioral characteristic of a human being that can distinguish

one person from another and that theoretically can be used for identification or

verification of identity. Biometric authentication methods include fingerprint,

iris, and retina recognition, as well as voice and signature recognition, to name

a few. Biometric authentication methods are less well understood than the other

two methods but when used correctly, in addition to what you have or what you

know authentication, may significantly contribute to strength of authentication.

Nevertheless, biometrics is a complex subject and is much more cumbersome to

deploy than what you know or what you have authentication. Unlike what you know

or what you have authentication methods, whether or not you know the password

or have the token, biometric authentication systems say how much you are like

the subject you are claiming to be; naturally this method requires much more

installation-dependent tuning and configuration.

Authorization

After declaring identity at the identification stage and proving it at the authentication

stage, users are assigned a set of authorizations (also referred to as rights, privileges, or

permissions) that define what they can do on the system. These authorizations are

most commonly defined by the system’s security

policy and are set by the security or system

administrator. These privileges may range from

the extremes of “permit nothing” to “permit

everything” and include anything in between.

As you can see, the second and third stages

of the identify-authenticate-authorize process

depend on the first stage, and the final goal of

the whole process is to enforce access control

and accountability, which is described next.

User account management and access control

in Solaris 10 are described in more detail in

Chapters 9 and 10.

Accountability

Accountability is another important principle of information security that refers to

the possibility of tracing actions and events back in time to the users, systems, or

processes that performed them, to establish responsibility for actions or omissions.

Authorization is the

process of ensuring that a user has

sufﬁcient rights to perform the requested

operation and preventing those without

sufﬁcient rights from doing the same. At

the same time, authorization is also the

process which gives rights depending on

the identity of the user—be it a human or

another system.

ch01.indd 8 4/20/05 12:50:03 PM

Describe Principles of Information Security

CertPrs8/Sun Certiﬁed Security Administrator for Solaris 9 & 10 Study Guide/Chirillo and Danielyan/225423-8/Chapter 1

A system may not be considered secure if it does not provide accountability, because

it would be impossible to ascertain who is responsible and what did or did not happen

on the system without that safeguard. Accountability in the context of information

systems is mainly provided by logs and the audit trail.

Logs

System and application logs are ordered lists of events and actions and are the primary

means of establishing accountability on most systems. However, logs (as well as the

audit trail, which is described next) may be considered trustworthy only if their

integrity is reasonably assured. In other words, if anyone can write to and/or erase

logs or the audit trail, they would not be considered dependable enough to serve as

the basis for accountability. Additionally, in case of networked or communication

systems, logs should be correctly timestamped and time should be synchronized

across the network so events that affect more than one system may be correctly

correlated and attributed.

Audit Trail

The difference between the audit trail and logs is not clearly defined. However,

we may say that logs usually show high-level actions, such as an e-mail message

delivered or a web page served, whereas audit trails usually refer to lower-level

operations such as opening a file, writing to a file, or sending a packet across a

network. While an audit trail provides more detailed information about the actions

and events that took place on the system, it is not necessarily more useful, in a

practical sense of the word, than logs, simply because abundance of detail in an audit

trail makes it more resource and time consuming to generate, store, and analyze.

Another aspect by which logs and audit trails differ is their source: logs are usually

and mostly generated by particular system software or applications, and an audit trail

is usually kept by the operating system or its auditing module. Auditing and audit

analysis in Solaris 10 are covered in detail in Chapter 5.

Functionality vs. Assurance

Having introduced the concept of accountability and how it is implemented on most

systems, it’s time to look at perhaps one of the most challenging issues of information

security: the issue of functionality versus assurance. The best way to illustrate this is

to refer to your own first-hand experience with computers: how many times has a

computer failed to do something that you expected of it, and how many times did it

do something you didn’t want it to do? It is this difference between our expectations

ch01.indd 9 4/20/05 12:50:03 PM

剩余31页未读，继续阅读

身份认证购VIP最低享 7 折!

30元优惠券

唐炎

粉丝: 0

信息安全基础概念与原则

Sun Certified Security Administrator for Solaris 9 & 10 Study Guide

Pattern and Security Requirements(Springer,2015)

.Net Security

如何求解fundamental matrix

c primer plus

Fundamentals of Physics. Extended

simulink的Fundamental Blocks介绍

半导体测试原理fundamental

最新资源