Trust is a very important factor in interpersonal relations, information network technologies, and especially on the Internet. An obstacle to the widespread use of available technologies is not only the need to acquire appropriate qualifications and necessary technical support, but above all, a lack of trust in the solutions offered.
Shopping on the Internet is easier, more convenient, and takes less time than traditional shopping. However, can we trust that we have made a purchase on the right website, that the purchased goods will arrive as described, that no one has snooped on our credit card data, that someone is not monitoring our purchases, etc.?
All computers and telecommunications networks are expected to have a certain level of confidence defined by security conditions. And currently, as we gradually migrate from wired to wireless networks, where the interface is open to everyone, security requirements are more stringent.
When trust is one-sided, cooperation cannot be effective. Recommendation plays a significant role in trust.
We understand the term “certain” as secure. In the field of information technology (IT), this term refers to business needs. IT security primarily refers to securing IT infrastructure and information within an enterprise.
The goal of secure information technology is to enable an organization to fulfill its mission/venture objectives while ensuring that risks to the organization, its partners, and customers are avoided. Security requirements, or security goals, are systematized as follows:
Availability. System availability is a feature that ensures access only to authorized users. This condition protects against: intentional or accidental attempts to unauthorizedly erase data or denial of service or display of data; attempts to use the system or data for an unauthorized purpose.
Integrity. In the field of IT, it is considered from two points of view: data integrity and system integrity. Unauthorized data manipulation can occur both during storage and during processing or transmission. System integrity means that the system has not been manipulated or even accessed in an unauthorized manner.
Confidentiality. In the case of information, data, and systems, it means that only authorized users receive information and that it is blocked for unauthorized entities.
Reliability. Reliability is a requirement for the unique execution of an action by an entity. This requirement becomes increasingly important as business dependence on IT grows. Reliability is significant for issues such as non-repudiation, false identification, detection and prevention of intrusion, and recovery to the state before an attack.
Certainty. Certainty is the requirement to demonstrate that security measures have been properly implemented and are effective in operation, and have sufficient resistance to intentional attempts to penetrate the system.
The article comes from the magazine “e-Fakty” 1/2004.