In studying information security there is a plethora of terms and definitions, some of which make a little more sense than others, at least at this time in the game. As in many other fields, understanding the basics is the key to understanding the more complex concepts and hence the basics are the necessary building blocks for further comprehension. This discussion centers on the basic terms. What do these terms mean and why are they important? Here is what I would like you to do:
o Do not just repeat the definition.
For example, authentication is necessary for me to withdraw money from my bank account. If a criminal was able to subvert the authentication process, my money would be in jeopardy. Another example is threat analysis. It is where we ask, via brainstorming, a bunch of ‘what-if’ questions to hypothetically assess possible damage from potential negative occurrences. Unfortunately, threats are always changing, so this is really an ongoing discussion. Come up with some more examples that demonstrate an understanding of the concepts and an ability to apply them to a context.
