cyberenviro | eportfolio

gregory donovan's eportfolio (a syndication of cyberenviro.org)

Archive for IGF

Seven Takes on Security

From the Compact Oxford English Dictionary:

security
noun (pl. securities)

(1) the state of being or feeling secure. (2) the safety of a state or organization against criminal activity such as terrorism or espionage. (3) a thing deposited or pledged as a guarantee of the fulfilment of an undertaking or the repayment of a loan, to be forfeited in case of default. (4) a certificate attesting credit, the ownership of stocks or bonds, etc.

From the DOD Dictionary of Military and Associated Terms:

security

(1.) Measures taken by a military unit, activity, or installation to protect itself against all acts designed to, or which may, impair its effectiveness. (2.) A condition that results from the establishment and maintenance of protective measures that ensure a state of inviolability from hostile acts or influences. (3.) With respect to classified matter, the condition that prevents unauthorized persons from having access to official information that is safeguarded in the interests of national security.

From the Internet Security Glossary, p. 149:

security

(1.) Measures taken to protect a system. (2.) The condition of a system that results from the establishment and maintenance of measures to protect the system. (3.) The condition of system resources being free from unauthorized access and from unauthorized or accidental change, destruction, or loss.

From Setha Low’s Behind the Gates: Life Security and the Pursuit of Happiness in Fortress America, pp 77-78:

So what exactly do residents mean when they say “I feel secure in my community”? At an emotional level, it means feeling protected and that everything is right with the world; unconsciously it is associated with a sense of childhood trust and protection by parents. Socially it means “I feel comfortable with my friends and neighbors.” “I feel secure in my community” also means feeling physically safe, not just psychologically or socially comfortable. These meanings — and many others — are evoked whenever they talk about security. This simultaneity and ambiguity of meaning gives the concept the power to evoke a complex and ever-shifting set of feelings, feelings that become encoded in a variety of symbolic forms, including the built environment.

From Microsoft TechNet’s Active Directory Application Mode (ADAM) Glossary:

security context

The security attributes or rules that are currently in effect. For example, the rules that govern what a user can do to a protected object are determined by security information in the user’s access token and in the object’s security descriptor. Together, the access token and the security descriptor form a security context for the user’s actions on the object.

From the Open Source Security Testing Methodology Manual (OSSTMM) 3, p. 16:

Security

A form of protection where a separation is created between the assets and the threat. This includes but is not limited to the elimination of either the asset or the threat. In order to be secure, either the asset is physically removed from the threat or the threat is physically removed from the asset.

From Bruce Schneier’s Beyond Fear: Thinking Sensibly about Security in an Uncertain World, pp. 11-12:

Security is about preventing adverse consequences from the intentional and unwarranted actions of others. What this definition basically means is that we want people to behave in a certain way — to pay for items at a store before walking out with them, to honor contracts they sign, to not shoot or bomb each other — and security is a way of ensuring that they do so.