This document discusses securing information systems. It defines an information system as a combination of hardware, software, infrastructure, and trained personnel used to collect, filter, process, create, and distribute data. The document outlines some threats to information systems like viruses, phishing, and application-specific hacks. It discusses three main security goals - integrity, availability, and confidentiality. Integrity aims to keep data trustworthy by protecting it from changes. Availability aims to keep data and resources accessible, especially during emergencies. Confidentiality preserves privacy through access control and encryption.

1. Securing Information
System

2. Tanjim Rasul
ID No:1016
Dept. of Philosophy
Jahangirnagar University

3. What is Information System
…
A combination of hardware, software,
infrastructure and trained personnel
organized to facilitate planning, control,
coordination, and decision making in an
organization
Information
System

4. What is Information System for
collect
filter
process
create
distribute
Data
Information System is
A networks of hardware and software that
people and organizations use to collect,
filter, process, create and also distribute
data.

5. Threats for Information System
The
threats
you face
Viruses
Virus back
doors
Phishing
Application
-specific
hacks
Blended
attacks
damages worth £1.8bn in 12 days
on the internet
hidden after-effects with potentially
devastating
impact
duped end-users
could lose faith
in IT systems
advanced SQL injection
could be Stealing your data
criminals use multiple
methods to beat even
the best security.

6. To Secure Information System
Security Goals
Integrity
Availability
Confidentiality

7. To Secure Information System
Integrity Models
keep data pure and trustworthy by protecting system data from
intentional or accidental changes. Integrity models have three
goals:
• Prevent unauthorized users from making modifications to data
or programs
• Prevent authorized users from making improper or unauthorized
modifications
• Maintain internal and external consistency of data and programs

8. To Secure Information System
Availability Models
keep data and resources available for authorized use, especially during
emergencies or disasters. Information security professionals usually
address three common challenges to availability:
• Denial of service (DoS) due to intentional attacks or because of
undiscovered flaws in implementation (for example, a program
written by a programmer who is unaware of a flaw that could crash
the program if a certain unexpected input is encountered)
• Loss of information system capabilities because of natural disasters
(fires, floods, storms, or earthquakes) or human actions
• Equipment failures during normal use

9. To Secure Information System
Confidentiality Models
Some activities that preserve confidentiality, integrity, and/or
availability are granting access only to authorized personnel,
applying encryption to information that will be sent over the
Internet or stored on digital media, periodically testing
computer system security to uncover new vulnerabilities,
building software defensively, and developing a disaster
recovery plan to ensure that the business can continue to exist
in the event of a disaster or loss of access by personnel