Information security

1. PRESENTED TO: MA’AM SEHRISH
PRESENTED BY : AYESHA (135), ZAINAB(084)

2.  What is Information?
 What is Information Security?
 Threats
 Types of attack
 3 Principal of Information Security
 Security in different aspects
 Importance of Information Security

3. u
“Information is an asset which, like other important business assets, has value to an
organization and consequently needs to be suitably protected”

4.  The quality or state of being
secure to be free from danger
 Security is achieved using
several strategies or used in
combination with one another
 Security is recognized as
essential to protect vital
processes and the system
that provide those processes
 Security is not something you
buy, it is something you do
j

5. Confidentiality: unauthorized disclosure of information
Integrity: unauthorized modification of information
Authenticity: unauthorized use of service

6. Confidentiality is the term used to prevent
the disclosure of information to unauthorized individuals or
system.
 Data should be kept secret. The
owner of data has to decide who can
only access the data and who can’t.

7. Integrity means that data cannot b modified undetectably.
 Unauthorized person should not modify the data without owner’s
permission. Not only modification, they should not remove the data
and add false data.
Example

8. Ability of the infrastructure to function according to
business expectations during its specified time of
operation
Nobody can disturb the system to make it unstable

9.  SQL Injection
 Dictionary attack
 Phishing
 Cross site scripting
 UI redressing

10. A principal which is a core requirement of information
security for safe utilization, flow, and storage of information
is CIA triad. CIA stands for confidentiality, integrity and
availability.

11.  Data Security
 Computer Security
 Network Security

12. The information
security in important
in the organization
because it can protect the
confidential information,
enables the safe
operation of application
implemented
on the organization’s
information.
h