Questions tagged [confidentiality]

Confidentiality is the property of maintaining the secrecy of an asset. In other words, confidentiality means protecting against the threat of disclosure. It is one of the three key security properties of an asset, along with integrity and availability.

Filter by
Sorted by
Tagged with
1
vote
1answer
189 views

Security aspect vs Security goal

What is the difference between a security goal and a security aspect ? I know about the three network security goals Confidentiality, Integrity and Availability. But I do not know much about security ...
1
vote
2answers
222 views

Identify a user using random characters of the password

Assuming a password is not stored in plain-text, how is it possible that a support guy is able to identify during a phone call a customer by asking him random characters of his password? For example, ...
1
vote
2answers
286 views

Confidentiality and integrity

Users permissions and privilege should be considered as a part of confidentiality (specifically access control) or integrity? And I'm also wondering if we can categorize Accountability, Authenticity ...
1
vote
2answers
108 views

A manual function for hasing identity?

I hope you won't close the question. Even though there are no computers involved, it is still about information and security, and I think that security experts are the ones who will be able to help ...
1
vote
1answer
85 views

What's the safest way to store data on a server abroad? [closed]

A very good friend of mine is a journalist in a country where the state is becoming more and more despotic. She would like to store critical data on a server abroad. Is there any service that would ...
1
vote
2answers
142 views

Is there any 'Open Enrypted File Container' Format?

Tools that create 'encrypted file containers' use open encryption standards like AES to encrypt container contents, however the container format is proprietary, I am guessing, so need the same tool to ...
1
vote
1answer
296 views

Why “ Simple Integrity Property” axiom of Biba model protects data integrity?

I am reading CISSP and more specifically the Biba model. Biba has some basic properties: The Simple Integrity Property states that a subject cannot read an object at a lower integrity level (no read-...
1
vote
1answer
612 views

Do symmetric cryptographic primitives provide both integrity and confidentiality?

I understand that symmetric cryptographic algorithms provide confidentiality through the use of a key to encrypt plain text to cipher text but how can they provide for integrity as well? Would it not ...
1
vote
1answer
1k views

Confidentiality doesn't provide integrity, but it does enable it?

I've heard it stated that it is a common misconception that encryption provides data integrity. A highly voted question on this topic - Does encryption guarantee integrity? - has some very insightful ...
1
vote
2answers
850 views

Confidentiality and Integrity violation in database security

I read some topics on database security. Now I have two questions about confidentiality and integrity violation, Thanks anyone who answers me: If we consider knowing the availability of data as a ...
1
vote
3answers
155 views

Question: How to plan email policy for start-ups?

I'm a part of a software start-up. I've the role of IT admin as well as requirement gathering (business analysis). Right now we're a team of seven people and we all are in the 'core team'. Now we're ...
1
vote
1answer
380 views

Does Google Analytics collect any information about the contents of the web page?

If I enable Google Analytics on my web application, does the Google Analytics Javascript collect any information on the web page (any of the content on the page)? Does it collect any information ...
1
vote
1answer
160 views

A safe digital typewriter

If I understand well, it is now well documented that all Intel chips should be considered as back doored because of the Intel Management Engine. I guess one should now consider that all chips over a ...
1
vote
1answer
442 views

Security characteristics through ISO 25023 standard

Could you please help me to clarify the following: ISO 25023 standard divided security into the following 5 characteristics which are: Confidentiality characteristic (divided into) -----> Access ...
1
vote
1answer
210 views

Security Standards for storing private customer data

A certain government regulation in my country mandates all non-resident donors to provide a copy of their identification (usually, the passport). So, we ask the donors to upload a copy of their ...
1
vote
1answer
164 views

Ciphertext for email vs Ciphertext for database

Let's say Bob wants to send a message to Alice. This communication requires to achieve confidentiality, integrity, proof of origin, non-repudiation. Therefore we can use this cipher-text: ciphertext =...
1
vote
1answer
669 views

Android application level encryption cracking

We come across Android applications which use the custom encryption. When we proxy the Android phone or emulator, the proxy captures traffic which is unreadable. Is there a known technique to read ...
1
vote
0answers
68 views

Keeping data confidential from the system administrator

Problem How do I ensure that I cannot access confidential data manually through the database? Practically speaking, this is a firestore database on google cloud, and I have access to the administrator ...
1
vote
2answers
481 views

What is the difference between concealment and secrecy in context of confidentiality?

I just started studying up for the CISSP and am having trouble understanding few concepts. This is regarding confidentiality, Below are some of the aspects of confidentiality Sensitivity Discretion ...
1
vote
0answers
60 views

AES and message properties

An active attacker changes the ciphertext which was made using the AES cipher algorithm. Which message properties are preserved even though that change was made. Choose one of the below: 1) Integrity ...
0
votes
2answers
127 views

Security in the breaking cloud? Storage Wars?

If access to a cloud server instance that stores personal/important information is lost or removed by the provider, is my data protected? Can the provider access my data and copy it, distribute, or ...
0
votes
2answers
1k views

Can importing an .ics file be dangerous?

Can there theoretically be any possible malicious code hidden in .ics files, which would steal your calendar data or something similar? For an example case, we'd be importing the .ics file into Google ...
0
votes
3answers
954 views

Overwriting only Free Space with rubbish data to prevent data recovery?

I am aware of tools which write zeros or other useless data to fill up your harddrive, however so far all of the tools I have come across must fill up the entire harddrrive. My understanding of the ...
0
votes
1answer
436 views

Why does integrity exclude confidentiality? [closed]

I'm trying to understand the CIA triad. I read that all three parts of the triangle exclude each other, but I don't understand why you can't have full integrity and full confidentiality? I figure you ...
0
votes
2answers
90 views

Guarantee one unique identity per node

I'm in the early stages of designing a decentralised systems protocol, based on a blockchain, for a thesis. For the protocol to remain secure, each node in the system must be capable of generating one,...
0
votes
3answers
977 views

Security goals vs ITU-T security services

I am doing a course on cryptography, and there I learned that the major security goals are Confidentiality Integrity Availability Also I Learned that ITU-T provides 5 different security services ...
0
votes
2answers
884 views

Does SSL/TLS (https) reveals your IP address? [duplicate]

Because the NSA monitors traffic going through the major nodes of the internet, they can know which IP address does what on your website, even if you are using HTTPS. Is this true or false?
0
votes
2answers
172 views

API - How can I make sure data sent by the user is only sent to my application?

I have an API and a web application where users can login through another system and then post text messages to my application, for example. How can I assure that when this data is only posted to my ...
0
votes
4answers
142 views

Travel information and passport

I travel a lot and I am looking a good way to send my travel information, like hostel, passports etc. to send to my family before leaving. This information is confidential. Actually, I am using a Zip ...
0
votes
2answers
205 views

Privacy of client's virtual machine in cloud computing

As we know clients can create and run their virtual machines (VM)in the cloud computing. My question is about the confidentiality of data stored in the client's VM. Question 1: Does data stored in a ...
0
votes
2answers
245 views

Prevent organization's code from being leaked or stolen [duplicate]

I am wondering how I can control the organization's code from being leaked or stolen. Currently we are using GitHub, in order to protect the code I am planing to use GitLab on a local server, so the ...
0
votes
3answers
177 views

How to keep client data confidential when attacked by a ransomware?

Hypothetical scenario: If a ransom-ware attack was to happen which threatened to make public "private client data" if you didn't pay up. Assuming such a virus exists and you've already been infected,...
0
votes
1answer
76 views

Security Engineering Potential Threat?

I've been working on some security engineering problems and there is no solution provided so if someone can clarify, would be great. From the point of view of security engineering, which is not a ...
0
votes
1answer
286 views

Forced to install certificate on my laptop when using company WiFi. Risk? [duplicate]

My company has a 'bring your own device' policy. You connect your device to the WiFi, and then open a citrix environment through a web portal. Basically, everything inside the citrix env is company-...
0
votes
3answers
297 views

I found a website that lists all the email addresses of Facebook users in UK. What do I do? [closed]

I came across this very peculiar website that supposedly lists the email addresses of Facebook users in the UK. I will not be posting the URL for obvious reasons. I entered a couple of emails to see ...
0
votes
1answer
367 views

Why do I see bridged devices when monitoring Wi-Fi activity?

I'm trying to figure out what information about my infrastructure can leak through Wi-Fi. I ran Kismet and was surprised to see that a few minutes later, Kismet displayed not only the MAC addresses ...
0
votes
1answer
4k views

Question about compare Bell-LaPadula and Biba models with Chinese wall policy

what the Chinese wall models try to achieve and how it differ from or improve upon the Bell-LaPadula and Biba models
0
votes
1answer
109 views

Using randomly generated numbers to authenticate with a Relay server

I'm developing a public VoIP relay server, that will help bypass internet firewalls by allowing two clients to connect with it and then it will relay data between the two. Both clients will connect ...
0
votes
1answer
47 views

Any Point To Paper Submission Of Forms Versus Electronic Submission

I know we're not going to like this question because it has some obvious answers, but I am looking for a thorough breakdown, and I could not find another mention of this topic on this site. Paper ...
0
votes
1answer
202 views

Data categorization: tools?

For the purpose of setting in place the appropriate means of securing data, and to secure this process, I'm asking me the questions: What are the tools to associate to a document a categorization ...
0
votes
0answers
42 views

Storing account data on device

I am trying to make an app that allows the user to connect to a service through an API I am also developing. All passwords and account data are securely stored on the server. However, how should I ...
0
votes
0answers
25 views

Does Angular Server Side Rendering offer any security benefits?

As the title states does the Angular Server Side Rendering functionality offer any security benefits at all? Let's say I have a login system or something similar. Would it provide additional ...
0
votes
0answers
55 views

Passing confidential data to an IFrame

There are two different web applications Host and App which are hosted separatedly, i.e. in particular on different domains. App is not designed to be accessed directly. Rather users are expected to ...
0
votes
0answers
45 views

need to address a subset of CIA triad elements and not in entirety

Its usually recommended that 'don't use your own system of Crypto' rather use standard SSL/TLS! I understand that SSL/TLS is a complete protocol suite that addresses all three elements of CIA triad. ...
0
votes
0answers
38 views

When signature dont guarantee non repudiation

Ehy guys, I read that signature guarantee non repudiation. But in generale exist a way ti no guarantee non repudiation with signature? Ad example Enc(signature(m) should be guarantee Instead for ...
0
votes
0answers
79 views

What are the main differences between a covert timing channel and a covert storage channel?

I am trying to find the differences between a covert timing channel and a covert storage channel in terms of detectability, performance, features, and any other advantages and disadvantages. Is ...
0
votes
0answers
47 views

When sharing confidential information, which is more secure share via Outlook vs store on Sharepoint then provide access?

I'm trying to figure out what is good practice and what is more secure for my small team. I wanted to set a standard or governance on how to share confidential information within our team. One person ...
0
votes
0answers
119 views

Why do people redact MAC addresses? [duplicate]

What are the security implications of sharing a MAC address online? How important is it really, to redact this information; and why? I see it a lot, and I'm in the habit of doing it myself. 1. ...
0
votes
2answers
95 views

Is there any way to track the status of a document sent to an external entity?

I'm wondering what the capabilities for document (PDF/DOCX/XLSX/PPTX) tracking are , specifically to determine whether a client has broken a non-disclosure agreement. Here's a scenario: Service ...
0
votes
2answers
132 views

User generated search queries

Are user generated search queries classed as sensitive data? For example, if an application put PII from a search query such as names, date of birth, addresses etc. in the query string of a URL (...