Tag: #WSQ01

ACI: My perspective.

--Originally published at IsmaLga on Informatics Security.

During the first day of class we started discussing about availabity, confidentiality and integrity as key elements of information security. Ken told us that these were three essential concepts that are going to be heavily discussed during the whole semester.

The Cambridge Dictionary defines security as "the protection of a person, building, organization, or country agaisnt threats". Another definition by the same dictionary is "the fact that something is not likely to fail or be lost". A third definition is "the group of people responsible for protecting a building". I bring the comment of this definitions because they can make us aware of three different things: there is a need to protect against threats, you need to assure that a system won't fail and that in security and there is people making sure that everything works as it should and that no potentital threats come close to the stuff they protect.

Availibality, integrity and confidentiality clearly relate to the definitions described above.

Availability refers to the fact that systems must be up and running. This is implemented on systems by having the capacity and performance tools to protect against threats and recover information in case of failure. These requires infraestructure and technicians that are able to protect in case of threats and to offer fast response when an attack or a fail occurs. Availibality relates to the definion that says "the protection of a person, building, organization, or country agaisnt threats".

Integrity means assuring the accuracy of data, one example for integrity is that messages can't be modified without detection. For this, the systems should be protected in a way that attackers can't compromise data integrity, also, the system should be protected against user mistakes and have privileges on the access of systems. You can assure integrity with data access Continue reading "ACI: My perspective." →

Deal better with passwords

--Originally published at TC2027 – Titel der Website

Dear students and friends,

 

in my Blog post i am going to Talk about „how to deal with passwords on the Internet“.

We talked about this issue in the course of Ken „Computer and Information Security“. The point is, that the average Internet user have just 5 or less passwords for every page where they logged in.

This is a big problem when you have for example the same password for Paypal and Amazon. So problem is, if someone hacks one of this accounts you may have a big financial problem.

This could lead to a financial ruin.

 

But why do just a few people think about such things when this actually happens all the time?

This is due to the human being. Humans tends to learn things only when something bad happens to himself.

 

To be honest, I thought sometimes, that i really use always the same passwords and i was worried. But i did nothing. Only after this lecture where we talked about stuff like this I have dealt with it.

 

To ensure a safer stay on the Internet, I have installed the AddOn Lastpass for my browser.

LastPass is a freemiumpassword management service that stores encrypted passwords in private accounts. LastPass is standard with a web interface, but also includes plugins for many web browsers and apps for many smartphones.[1] It also includes support for bookmarklets.[2]

https://en.wikipedia.org/wiki/LastPass

 

Specials of Lastpass:

  • safes all your passwords and Email adresses
  • put the internet sites in categories
  • creates safe passwords for you (if you want)
  • can make a safety check of all your passwords

 

The most important thing with LastPass is, that you need a Master-Password. This should be something super long. It is the best to use a completely

Continue reading "Deal better with passwords" →