應用程式 安全

資訊安全基礎概念

Part 1

資訊安全是

全面性的

弱點數量的

趨勢

Reference: http://www.sans.org/top-cyber-security-risks/

1.認證2.授權3.機密性4.完整性5.可歸責性6.可用性7.不可否認性

認證

授權

機密性

Reference: http://www.wretch.cc/blog/bassman911/15714653

完整性

可歸責性

可用性

不可否認性

1. Secure the weakest link2. Practice defense-in-depth3. Fail securely4. Follow the principle of least privilege5. Compartmentalize6. Keep it simple7. Promote privacy8. Remember that hiding secrets is difficult9. Be reluctant to trust10.Use your community resources

• Neil Daswani, Christoph Kern, and Anita Kesavan. 2007. Foundations of Security: What Every Programmer Needs to Know. Apress

• Shon Harris. 2005. CISSP All-in-One Exam Guide. McGraw-Hill Osborne Media

參考資料

謝謝您cyril.hcwang@gmail.com