CSC8419 Cryptography and Security - Assessment 1

Student Name Student ID
CSC8419
Cryptography and Security
Assessment 1
Student Name:
Student ID:
1

Student Name Student ID
Contents
Task 1: What does CIA stand for in the context of computer security?..................................................3
Task 2: List 5 general design decisions that have to be made while constructing secure systems..........5
Task 3:......................................................................................................................................................7
Task 4:......................................................................................................................................................8
Task 5.....................................................................................................................................................10
References..............................................................................................................................................12
2

Student Name Student ID
Task 1: What does CIA stand for in the context of computer security?
CIA
CIA is a combined form for basic computer security. It consists of mainly three features
which ensures or assists the security levels. These terms are –
 Confidentiality
 Integrity
 Availability
These three terms jointly conclude to system security. All these elements play a crucial role
in system security and all these parameters must be achieved. If any of the principle
components is not achieved, then there can be some serious issue in a security breach of the
data.
Confidentiality
This term is related to the privacy policy of security. In this such security measures are taken
which ensures the data to be open to genuine and authorized person and not to a wrong
person. Access of data must be restricted to an only authorized person then the parameter of
confidentiality is reached. Usage of strong password for securing the data is a known practice
for confidentiality. ACL (Access Control Lists) can be applied to control the user executions
to the data. This will ensure that there will be no damage or alteration to data from an
unauthorized person. Encryption and cryptography is a great option for the parameter of
confidentiality (Chia, 2018).
Integrity
It is the term which ensures that the through its cycle is consistent and accurate. Here attacks
are done by intercepting the data and altering the information. Data cannot be changed or
altered here from an unauthorized person. Here Access Control Lists (ACL) comes handy in
managing the user permissions for the data. Data encryption algorithms can help in the data
integrity property of the data. Therefore, integrity is somewhat dependent on the
confidentiality of data (Chia, 2018).
3

Student Name Student ID
Availability
Data availability can be understood by its name. Data and information must be available. The
authorized users must be able to access the data or information whenever required. It can be
ensured by regular checkup and maintenance of the hardware and network components to
provide consistent service. Attackers mostly find a way to discontinuing the service provided
by the system so that data is not available to the end user. (Chia, 2018)
4