[RUBY] Summary of information security

Information security

Information security refers to the security of web services. Ideally, it should improve the convenience of authorized users while preventing information leakage and unauthorized access.

It is the mission of the WEB service to maintain the following three.

  1. Confidentiality -Prevent unauthorized persons from viewing or using information assets
  2. Integrity -Prevent unauthorized persons from erasing or rewriting information
  3. Availability -Make the service available to authorized persons (users) at any time

Defects and problems that threaten security in all are called vulnerabilities </ strong>. Also, vulnerabilities </ strong> are created by under-checking and bugs by developers.

Specific examples of vulnerabilities </ strong> are as follows -Personal information can be viewed without permission (infringement of confidentiality) -The content of the WEB page is tampered with (infringement of integrity) -Web page cannot be used (availability infringement)

It is necessary to take proper measures against vulnerabilities </ strong> because it causes damages such as financial compensation to users, loss of trust of developers, and loss of opportunities.

Recommended Posts