COMPUTER SECURITY PRINCIPLES AND PRACTICE DEFINITION OF
TERMS
Computer Security - ✔✔ Protection of hardware, software, and data assets of a computer system
Assets of a Computer System - ✔✔ Includes hardware, software, and data, with values ranging
from off-the-shelf to unique and irreplaceable
Confidentiality - ✔✔ Ensures that assets are not accessed by unauthorized people
Integrity - ✔✔ Ensures that assets are not modified or altered without proper authorization
Availability - ✔✔ Ensures that assets are accessible to authorized parties at appropriate times
Vulnerability - ✔✔ Weakness in the security system, procedures, design, or implementation that
might be exploited to cause loss or harm
Threat - ✔✔ Set of circumstances that has the potential to cause loss or harm for the
organizational operations, assets, or individuals
Attack - ✔✔ Malicious activity that attempts to collect, deny, or destroy information system
resources or the information itself
TERMS
Computer Security - ✔✔ Protection of hardware, software, and data assets of a computer system
Assets of a Computer System - ✔✔ Includes hardware, software, and data, with values ranging
from off-the-shelf to unique and irreplaceable
Confidentiality - ✔✔ Ensures that assets are not accessed by unauthorized people
Integrity - ✔✔ Ensures that assets are not modified or altered without proper authorization
Availability - ✔✔ Ensures that assets are accessible to authorized parties at appropriate times
Vulnerability - ✔✔ Weakness in the security system, procedures, design, or implementation that
might be exploited to cause loss or harm
Threat - ✔✔ Set of circumstances that has the potential to cause loss or harm for the
organizational operations, assets, or individuals
Attack - ✔✔ Malicious activity that attempts to collect, deny, or destroy information system
resources or the information itself
