• Share
  • Email
  • Embed
  • Like
  • Save
  • Private Content
Information Security Lesson 1 - Eric Vanderburg
 

Information Security Lesson 1 - Eric Vanderburg

on

  • 139 views

 

Statistics

Views

Total Views
139
Views on SlideShare
139
Embed Views
0

Actions

Likes
1
Downloads
9
Comments
0

0 Embeds 0

No embeds

Accessibility

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

    Information Security Lesson 1 - Eric Vanderburg Information Security Lesson 1 - Eric Vanderburg Presentation Transcript

    • Information Security Chapter 1 Information Security © 2006 Eric Vanderburg
    • Security Challenges • • • • Day Zero Exploits Distributed Attacks Patch Management Difficulties Reported Security Incidents 1988 1992 1996 2000 2003 6 773 2,573 21,756 137,529 Information Security © 2006 Eric Vanderburg
    • Terms • Information Security – Protecting Information – Stored Information (Hardware & Software) – Transmitted Information (Medium & Method) • Asset – something with value (customer list) • Threat – something that can negatively effect an asset (steal customer emails) • Threat agent – person carrying out a threat • Vulnerability – security weakness (plain text) • Exploit – taking advantage of a vulnerability Information Security © 2006 Eric Vanderburg
    • • Information components we protect (CIA) – Confidentiality – Integrity – Availability Information Security © 2006 Eric Vanderburg
    • General Threats • Data Theft – Causes huge financial loss ($170 M) – Loss of goodwill if known by public – Loss of privacy • Identity Theft – 3.4% of Americans – Largest group between 18 and 29 • Attacks reduce productivity • Cyberterrorism against gov’t or infrastructure Information Security © 2006 Eric Vanderburg
    • Security Legislation • HIPPA (Health Insurance Portability and Accountability Act) – Medical Info privacy • Sarbanes-Oxley Act – Financial reporting • GLBA (Gramm-Leach-Bliley Act) – Financial organizations must notify of changed policies • Patriot Act – Increased surveillance of law enforcement, more information can be requested • California Database Breach Act – Residents must be informed in 48 hrs of a loss of personal info (applies to those who do business in California) • COPPA (Children's Online Privacy Act) – Cannot collect personal info without parental consent if under the age of 13 Information Security © 2006 Eric Vanderburg
    • Security+ • CompTIA (Computing Technology Industry Association) • Vendor Neutral • Security Concepts Tested • 100 Questions • 90 minutes • Passing Score: 764 out of 900 • Exam: SY0-101 • Recommended prerequisite: Network+ • http://www.comptia.org/certification/Security/prepare.aspx Information Security © 2006 Eric Vanderburg
    • Acronyms • CIA (Confidentiality, Integrity, Availability) • HIPPA (Health Insurance Portability and Accountability Act) • GLBA (Gramm-Leach-Bliley Act) • COPPA (Children's Online Privacy Act) *Act Acronyms will not be tested Information Security © 2006 Eric Vanderburg