Information Security Concepts and Secure Design Principles

Current video talks about, Information Security and its importance in IT industry. We will also see, meaning of term 'Return of Investment' (ROI) from Security point of view.

Terminology used in Information Security is often confusing, as most of the terms are theoritically integrally related. Current video talks about some of these terms used frequently while discussing any domain or topic in Information Security.

In current video, we will provide overview on CIA triad and then talk about 'Confidentiality' in detail, which is all about protecting data from un-required disclosure. We will see, what confidentiality means and discuss some of the common methods required to ensure it. Video also provides some details on Information Disclosure attack and Steganography.

In current video we will talk about Cryptography process, its types (Symmetric & Asymmetric) and how it is used to ensure Confidentiality of Information.

Current Video talks about Public Key Infrastructure and how it is used for Key Management. We will also discuss some details on Digital Certificates and its purpose.

Current video, talks about basic concepts related with TLS/SSL protocol and how its handshake process make effective use of PKI for key distribution.

Current video talks about Integrity of an information, which is another part of CIA triad and is one of the must have requirements of any Secure Systems. We will also talk in brief about attacks like Man-in-the-Middle and Tampering and some of the measures to ensure integrity.

Current video talks about use and features of Hashing and Digital Signature and How these are used to ensure Integrity of a data.

Current video talks about Availability, which is the 3rd leg of CIA triad. Along with that, we will also discuss about Denial of Service attack which could result in compromise of Availability of a System.

Current video talks about Authentication and its different modes of implementation, viz Something You Know, Have and Are.

Password is the most widely used mechanism to ensure Authentication. In current video, we will walk through some of the commonly known Password characteristics, best practices to implement them, common attacks which could compromise Passwords and some details on One-Time Password and Single Sign-On Process.

Current video talks about other two parts of AAA concept, which are Authorization and Accountability. Authorization process ensures proper privileges of Authenticated User, while Accountability is all about keeping track of Actions and consumed resources by User. Along with these, we will also discuss on Privilege Escalation attack and about Non-Repudiation.

Current video talks about Access Control mechanism. We will talk about different layers (Physical, Logical and Administrative) of Access Control measures and different modes (MAC, DAC, RBAC and RuBAC) to implement them.

Current Video provides a Quick Walk Through on some of the Security concepts and Design Principles as discussed under this course.