3 ms·
Confidentiality, integrity and availability. Those are the components of a secure system. Crypto provides the first two. But what about the third?
by edejong 7y ago
Confidentiality, integrity and availability. Those are the components of a secure system. Crypto provides the first two. But what about the third?
- thaumasiotes 7y agoThe third is a lot less important and doesn't call for the same approaches as the first two. If availability is compromised, that is obvious to the end user(s).
- gsich 7y agoIt's still important. Otherwise you get statements like: "the most secure computer is one that isn't turned on" like that wouldn't be obvious.
- thaumasiotes 7y agoThat statement is correct, obviously, and its wisdom is actually implemented in things like network segmentation, air gaps, and cold wallets. Availability is still important, but, as I said, much less important than integrity. (The importance of confidentiality varies.) And having a problem you know about is pretty much always a significant upgrade compared to having a problem you don't know about.
- edejong 7y agoNone of them are less important. All three need to be present in order for a system to be secure. Especially when it comes to attacking infrastructure, removing the availability of operations on this infrastructure is a good attack vector. This can be done by, for example, creating a temporary ban on logging in. It can be done by reporting a hacking attempt from the legitimate IP address range.