Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

7. He Who Steals My Purse ...

Chapter Spotlight

• Physical data loss from benign or malicious cause; loss of availability and potential loss of confidentiality

• Protecting computers and data against physical harm from theft, hardware failure, or disasters

• Encryption concepts; analytic attacks against cryptosystems

• Symmetric (or secret key) encryption

• DES and AES encryption algorithms

Attack: Veterans’ Administration Laptop Stolen 277

Threat: Loss of Data 278

Extended Threat: Disaster 278

Vulnerability: Physical Access 279

Vulnerability: Unprotected Availability of Data 279

Vulnerability: Unprotected Confidentiality of Data 279

Countermeasure: Policy 280

Countermeasure: Physical Security 280

Countermeasure: Data Redundancy (Backup) ...