0
votes
1answer
50 views

Security Engineering Potential Threat?

I've been working on some security engineering problems and there is no solution provided so if someone can clarify, would be great. From the point of view of security engineering, which is not a ...
3
votes
1answer
960 views

Who is the creator of the CIA triad?

The Information Security goals - Confidentiality, Integrity and Availability (CIA) - are often referenced to as the CIA triad. As I am writing on my master thesis, I am wondering to which resource I ...
0
votes
3answers
210 views

Security goals vs ITU-T security services

I am doing a course on cryptography, and there I learned that the major security goals are Confidentiality Integrity Availability Also I Learned that ITU-T provides 5 different security services ...
3
votes
2answers
231 views

Confidentiality and integrity for web session

When the client authenticates with our service, he is issued an opaque "token". This token includes the information, that identifies the client and some other information about the client ("payload"). ...
1
vote
1answer
111 views

Ciphertext for email vs Ciphertext for database

Let's say Bob wants to send a message to Alice. This communication requires to achieve confidentiality, integrity, proof of origin, non-repudiation. Therefore we can use this cipher-text: ciphertext ...
0
votes
2answers
106 views

API - How can I make sure data sent by the user is only sent to my application?

I have an API and a web application where users can login through another system and then post text messages to my application, for example. How can I assure that when this data is only posted to my ...
2
votes
5answers
215 views

Is DRM considered Confidentiality, Integrity, Availability, or some combination of the three?

I was discussing software trial time limit enforcement with a colleague and the idea of CIA came up. Do stricter enforcement techniques increase confidentiality at the expense of availability? (for ...
15
votes
6answers
7k views

Does SSL/TLS (https) hide the urls being accessed [duplicate]

Suppose I type this in my browser https://www.mysite.com/getsecret?username=alice&password=mysecret and an attacker is watching all traffic from me to my ISP. What information is protected by ...
5
votes
2answers
325 views

Oracle Internet Directory (OID) hardening

What are best practices, recommendations, required reading for securing/hardening an Oracle internet directory? note: OID is compatible with LDAP version 3.