Added description of the "CIA Triad" (#24707)

Added the text: "The CIA triad is a model used in Information Security to build sound policy. The acronym "CIA" stands for Confidentiality, Integrity, and Availability. These three items are the most important components of security."
This commit is contained in:
Josh
2019-03-07 19:10:52 -08:00
committed by Randell Dawson
parent 535bbab99a
commit aa82e7f9f3

View File

@ -15,6 +15,8 @@ In an interesting hack on Parity (on the Ethereum blockchain), "white hack hacke
There are also "black hat hackers" who do not disclose the vulnerabilities they discover, and instead use them to create exploits to attack people's systems, or sell the exploits to the highest bidder. They often do this to steal data that they can ransom off, or just release into the open to cause chaos.
The CIA triad is a model used in Information Security to build sound policy. The acronym "CIA" stands for Confidentiality, Integrity, and Availability. These three items are the most important components of security.
Security researchers use a wide variety of methods and tools, which are discussed in this section.
Although hacking is a key threat to secure applications, it is not the only one. Application developers need to balance user experience with security features. Some cyber breches are self-infliced due to complex or hard to understadn security configurations. What security features should be set by default? What features should be seemless and which should require explict user consent?