System and Network Security
Saida Helali · 2020
IT security is made up of all of the technical, organizational, legal and human procedures deployed to maintain and ensure the security of the hardware and software resources of an enterprise's IT system. IT system security generally involves measures against threats, vulnerabilities and attacks. Attacks can be grouped into four categories: Access attacks, modification attacks, saturation attacks, and repudiation attacks. Security mechanisms are means deployed to detect, prevent and fight against a security attack on the assets of an IT system. Encryption algorithms, hash functions, electronic signatures and digital certificates are some of the best-known examples of encryption tools to address issues of communications security. The norm ISO 27001 sets the requirements for the setup of an information security management systems (ISMS) and and norm ISO 27002 provides a catalogue of best practices for information security management.