Adarsh Journal of Information Technology

V. Kiran Kumar ¹, Fazal Mahemood ¹, N. Usha ¹

Affiliations
1 Dept. of ISE, SJBIT, Bangalore, IN

Abstract

Security continues to be an issue for organizations. Good information security is a mix of physical security, computer security, network security, backups, anti-virus software, firewalls, authentication methods, intrusion detection, confidentiality, integrity, availability, etc., Risk is the combination of threat and vulnerability. This paper deals with Information security in particular and concentrates on corporate networks. Threats without vulnerabilities pose no risk. Likewise, vulnerabilities without threats pose no risk. A secure system should still permit authorized users to carry out legitimate and useful tasks. It might be possible to secure a computer system against misuse using extreme measures. Most computer systems cannot be made secure even after the application of extensive "computer security" measures. Further more, if they are secure then functionality and ease of use often decreases. The assurance of security depends not only on the soundness of the design strategy, but also on the assurance of correctness of the implementation. There is no universal standard notion of what secure behavior is. "Security" is a concept that is unique to each situation. One technique enforces the principle of least privilege to great extent is even if an attacker gains access to one part of the system, fine-grained security ensures that it is just as difficult for them to access the rest. Further more, by breaking the system up into smaller components; the complexity of individual components is reduced. Most of the time people concentrate on coming out with efficient algorithms to analyze, process data. But not much importance is given to ensure data integrity, security, privacy, etc.

Full Text