Components of an information system, Computer Network Security

Assignment Help:

COMPONENTS OF AN INFORMATION SYSTEM

The components of an information system are software, data, hardware, people, procedures and Networks. These 6 components are critical to enable information to be input, then processed, output and finally stored. Each of these components of information system has its own weakness and strength.

Software


The software components of information system are consisting of applications, operating system and utility programs. This software is the most difficult to information system component to secure. Unfortunately, Software is at root of all the common computer security problems. If your software does not behave properly, a number of diverse sorts of problems can crop up: availability, reliability, safety, and security. The extra twist in security situation is that a bad guy is actively trying to make your software misbehave. This makes security certainly a tricky proposition.

Hardware

Security should be intertwined with every part of the system; the hardware is no exception. The interaction between software and hardware must be carefully planned. While doing so, the security of the whole system is strengthened. Hardware Security Module (abbreviated as HSM) is a physical device in form of a plug-in card or an external security device which can be attached to general purpose computer and servers.

The goals of an HSM are the:

a) Secure generation,
b) Secure storage, and
c) The use of cryptographic and data material which is sensitive.

HSMs provide logical and physical protection both of these materials from non- authorized use and potential adversaries. Several HSM systems have means to securely backup the keys they handle either in a wrapped form by means of the computer’s operating system or externally using a smartcard or some of the other security token. HSMs should never allow secrets exportation in the plaintext form, even when migrating between HSMs and performing the backup operations

Data Security

Data stored, processed, and transmitted through computer system should be protected. Data is the valuable asset possessed by an organization and it is the key target of intentional attacks.

People

People are the critical link in the information security program. Though often overlooked in computer security considerations, people have always acted as a thread to information security. Unless policy, training, education, awareness and technology are properly employed to prevent people from accidentally or intentionally damaging or losing the information, they will remain the weak link. Social network engineering can prey on potential to cut corners and the commonplace nature of human error. It can be used to manipulate actions of people to obtain access information about the system. It is imperative that managers continuously recognize the important role that people play in information security program

Procedures

Procedures are written instructions for accomplishing the specific task. When unauthorized user obtains an organization’s procedures, this poses a threat to integrity of the information. Procedures are information in their rights. Thus, knowledge of procedure, as with all critical information should be disseminated among the members of organization only on a need to know basis.

Networks

The IS component which created much of the requirement for the increased computer and information security is networking. When information systems are linked to each other to form the local area network (LAN), and these LAN’s, and these LAN’s are connected to the other networks like the Internet, new security challenges emerges rapidly.


Related Discussions:- Components of an information system

Listing assets in order of importance-risk management, Listing Assets in Or...

Listing Assets in Order of Importance Weighting should be created for each category based on the answers to questions. The relative importance of each asset is calculated usin

Assignment, Hello i have submitted an assignment and i am still waiting to ...

Hello i have submitted an assignment and i am still waiting to know if it has been accepted or not the ref number is TicketID: EM201381BRY525CN, the due date is for monday 27th of

Cyber security - vulnerabilities, The world has to deal with newly released...

The world has to deal with newly released vulnerabilities on a daily basis.  These vulnerabilities eventually lead to active exploits of systems, and it is our job as cyber securit

What is network address translation, Question: (a) What is Network Add...

Question: (a) What is Network Address Translation (NAT)? Why is it used? (b) Given a following information by your ISP about your newly acquired Frame Relay connection:

Netfilter firewall, Netfilter Firewall Netfilter is the popular name f...

Netfilter Firewall Netfilter is the popular name for the packet filtering system installed by default in the Linux kernel. The filtering system can be used as a very effective

Difference between synchronous tdm and statistical tdm, Question (a) A CRC...

Question (a) A CRC is constructed to generate a 4-bit FCS for an 11-bit message. The divisor polynomial is X 4 + X 3 + 1 (i) Encode the data bit sequence 00111011001 using po

Location to e-mail messages are saved, In the e-mail system, where the e-ma...

In the e-mail system, where the e-mail messages are saved and why? E-mail messages are saved in user’s private electronic mailbox. A mailbox refers to a local/domestic hard drive c

Bus topology, BUS TOPOLOGY In a bus topology all devices are attached ...

BUS TOPOLOGY In a bus topology all devices are attached to a single long cable and any device can send data to any other device. For this function, coordination is needed to d

Nessus vulnerability, You see two IP addresses. The IP address 192.168.58.1...

You see two IP addresses. The IP address 192.168.58.130 is the one of Bt4. The IP address 192.168.58.133 has ports 135 and 445 open; which indicates that it is a Windows machine. S

Write Your Message!

Captcha
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd