Three promises of a ticket site
You buy a football ticket online. The site makes three promises.
One: nobody else can see your card details. Two: your ticket is for the right match and the right seat. Three: the site works on the day you need it.
Break one promise and you are unhappy. Security people call these three promises the CIA triad.
Key words
| Word | What it means | Example |
|---|---|---|
| Confidentiality | Data is kept private. Only the right people can see it. | card details are hidden |
| Integrity | Data is correct and has not been changed by the wrong people. | the seat number is not changed |
| Availability | Data and systems are there and useful when needed. | the site works on match day |
| Triad | A group of three. | three promises |
| Tampering | Changing something without permission. | changing a mark in secret |
| Access | The ability to see or use something. | a login |
| Breach | A time when security fails and data is lost, seen or changed. | a stolen password list |
| Control | Something that protects data or a system. | a password |
| DDoS | An attack that sends so much traffic that a site stops working. | a shop site goes down |
| Malware | Harmful software. | a virus |
| Ransomware | Harmful software that locks your files and asks for money. | a pay us message |
| Outage | A time when a system does not work. | the site is down for two hours |
The cells students fill in are left blank in this preview.
Quick check: C, I or A?
Have a go
Quick check: C, I or A?
3 questionsHave a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score
Your answers are marked here and are not kept. A college account keeps every student’s marks.
What each goal needs
| Goal | Threat to it | A control that helps |
|---|---|---|
| Confidentiality | A stolen password list | Access control. Encryption (scrambling data) |
| Integrity | A stranger changes a mark | Permissions. Checks against a saved copy. Audit logs |
| Availability | A DDoS attack or a power cut | Backups. Spare systems. A firewall (a guard for internet traffic) |
The cells students fill in are left blank in this preview.
Which goal is broken?
Have a go
Which goal is broken?
6 questionsHave a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score
Your answers are marked here and are not kept. A college account keeps every student’s marks.