COMPUTER SECURITY PRINCIPLES AND PRACTICE DEFINITION OF TERMS

COMPUTER SECURITY PRINCIPLES AND PRACTICE DEFINITION OF
TERMS



Computer Security - ✔✔ Protection of hardware, software, and data assets of a computer system



Assets of a Computer System - ✔✔ Includes hardware, software, and data, with values ranging
from off-the-shelf to unique and irreplaceable



Confidentiality - ✔✔ Ensures that assets are not accessed by unauthorized people



Integrity - ✔✔ Ensures that assets are not modified or altered without proper authorization



Availability - ✔✔ Ensures that assets are accessible to authorized parties at appropriate times



Vulnerability - ✔✔ Weakness in the security system, procedures, design, or implementation that
might be exploited to cause loss or harm



Threat - ✔✔ Set of circumstances that has the potential to cause loss or harm for the
organizational operations, assets, or individuals



Attack - ✔✔ Malicious activity that attempts to collect, deny, or destroy information system
resources or the information itself