[{"data":1,"prerenderedAt":200},["ShallowReactive",2],{"i-lucide:menu":3,"i-lucide:arrow-up-right":8,"i-lucide:moon":10,"i-lucide:sun":12,"i-lucide:rss":14,"i-simple-icons:github":16,"i-simple-icons:linkedin":18,"post-\u002F2011\u002Fdata-security-and-cryptology-lecture-3":21,"surround-\u002F2011\u002Fdata-security-and-cryptology-lecture-3":187,"i-lucide:arrow-left":196,"i-lucide:arrow-right":198},{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":7},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 5h16M4 12h16M4 19h16\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":9},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M7 7h10v10M7 17L17 7\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":11},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M20.985 12.486a9 9 0 1 1-9.473-9.472c.405-.022.617.46.402.803a6 6 0 0 0 8.268 8.268c.344-.215.825-.004.803.401\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":13},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Ccircle cx=\"12\" cy=\"12\" r=\"4\"\u002F>\u003Cpath d=\"M12 2v2m0 16v2M4.93 4.93l1.41 1.41m11.32 11.32l1.41 1.41M2 12h2m16 0h2M6.34 17.66l-1.41 1.41M19.07 4.93l-1.41 1.41\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":15},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M4 11a9 9 0 0 1 9 9M4 4a16 16 0 0 1 16 16\"\u002F>\u003Ccircle cx=\"5\" cy=\"19\" r=\"1\"\u002F>\u003C\u002Fg>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":17},"\u003Cpath fill=\"currentColor\" d=\"M12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":19,"hidden":20},"\u003Cpath fill=\"currentColor\" d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z\"\u002F>",true,{"id":22,"title":23,"body":24,"category":169,"comments":170,"date":171,"description":172,"excerpt":170,"extension":173,"image":170,"meta":174,"navigation":20,"path":175,"readingTime":176,"seo":177,"stem":178,"subtitle":170,"tags":179,"wordCount":185,"__hash__":186},"posts\u002F2011\u002Fdata-security-and-cryptology-lecture-3.md","Data Security and Cryptology Lecture #3",{"type":25,"value":26,"toc":160},"minimark",[27,39,44,47,83,87,90,118,122,142,146],[28,29,30,31,35],"p",{},"Lecture homepage: ",[32,33],"a",{"href":34},"http:\u002F\u002Fenos.itcollege.ee\u002F~valdo\u002Fturve\u002F",[32,36,34],{"href":34,"rel":37},[38],"nofollow",[40,41,43],"h3",{"id":42},"safeguards","Safeguards",[28,45,46],{},"Safeguards can be divided into 3 classes:",[48,49,50,66,69],"ol",{},[51,52,53,54],"li",{},"Preventive safeguards - Prevent security incidents from happening. The main line of defense.\n",[55,56,57,60,63],"ul",{},[51,58,59],{},"\n- Minimize vulnerabilities and risk probabilities\n",[51,61,62],{},"\n- Prevent attacks\n",[51,64,65],{},"- Decrease the ripple effects of a security incident to other IT assets\n",[51,67,68],{},"Identifying safeguards - Tell us that a security incident has occurred so we can take suitable action.",[51,70,71,72],{},"Reconstructive safeguards - We need to restore the environment before the security incident occurred. For example, if the firewall was disabled, it needs to be re-enabled ASAP. The more important the object, the more attention should be given to reconstructive safeguards. Methods:\n",[55,73,74,77,80],{},[51,75,76],{},"- Backup",[51,78,79],{},"- Renovation",[51,81,82],{},"- Replacement",[40,84,86],{"id":85},"identifying-safeguards","Identifying safeguards",[28,88,89],{},"Goals:",[55,91,92,95,98,115],{},[51,93,94],{},"Avoiding the incident",[51,96,97],{},"Identify the incident ",[51,99,100],{},[55,101,102,105,108],{},[51,103,104],{},"- Operative Identification: If the incident happens, we immediately want to be notified and take immediate action. Example: fire alarm.",[51,106,107],{},"- Post Identification: If operative identification is not possible, we want the get the information as soon as possible. Log files and passive alerts (e-mails by crontab).",[51,109,110,111,114],{},"- Evidence Based Identification: Security elements added to IT assets to check integrity\u002Fconfidentiality.",[112,113],"br",{},"\n\t\t\t\tExamples: Signatures on paper documents, checksums on files",[51,116,117],{},"* Proving the incident happened (later)",[40,119,121],{"id":120},"classification-of-safeguards-by-it-assets","Classification of Safeguards by IT Assets",[55,123,124,127,130,133,136,139],{},[51,125,126],{},"Physical assets",[51,128,129],{},"Information \u002F data",[51,131,132],{},"Software",[51,134,135],{},"Ability to reproduce a product\u002Fservice",[51,137,138],{},"People",[51,140,141],{},"Intangible aspects",[40,143,145],{"id":144},"components-of-organizational-safeguards","Components of organizational safeguards",[55,147,148,151,154,157],{},[51,149,150],{},"Activities that someone must do",[51,152,153],{},"Activities that are prohibited for certain persons",[51,155,156],{},"Sanctions for doing something prohibited",[51,158,159],{},"Sanctions for not doing something that must be done",{"title":161,"searchDepth":162,"depth":162,"links":163},"",2,[164,166,167,168],{"id":42,"depth":165,"text":43},3,{"id":85,"depth":165,"text":86},{"id":120,"depth":165,"text":121},{"id":144,"depth":165,"text":145},"Learning",null,"2011-09-13","Lecture homepage: http:\u002F\u002Fenos.itcollege.ee\u002F~valdo\u002Fturve\u002F","md",{},"\u002F2011\u002Fdata-security-and-cryptology-lecture-3","about 1 minute",{"title":23,"description":172},"2011\u002Fdata-security-and-cryptology-lecture-3",[180,181,182,183,184],"encryption","security","college","lecture","vulnerability",268,"F0DrIyS8aK-IyC3aJzQedAihiy9J9gehaTtrDtUPnSE",[188,192],{"title":189,"path":190,"stem":191,"children":-1},"Opinions: Be a Developer, Not a Programmer","\u002F2011\u002Fopinions-be-a-developer-part-ii","2011\u002Fopinions-be-a-developer-part-ii",{"title":193,"path":194,"stem":195,"children":-1},"Modernizer is awesome.","\u002F2011\u002Fmodernizer-is-awesome","2011\u002Fmodernizer-is-awesome",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":197},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m12 19l-7-7l7-7m7 7H5\"\u002F>",{"left":4,"top":4,"width":5,"height":5,"rotate":4,"vFlip":6,"hFlip":6,"body":199},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M5 12h14m-7-7l7 7l-7 7\"\u002F>",1790886932833]