Security is the degree of resistance to, or protection from, harm. It
applies to any vulnerable and valuable asset, such as a person, dwelling,
community, nation, or organization. It can also be noted as a form of
protection where a separation is created between the assets and the threat.
These separations are generically called "controls," and sometimes
include changes to the asset or the threat.
Security concepts
- Assurance - assurance is the level of guarantee that a security system will behave as expected.
- Defense in depth - never rely on one single security measure alone.
- Risk - a risk is a possible event which could cause a loss.
- Threat - a threat is a method of triggering a risk event that is dangerous.
- Countermeasure - a countermeasure is a way to stop a threat from triggering a risk event.
- Vulnerability - a weakness in a target that can potentially be exploited by a security threat.
- Exploit - a vulnerability that has been triggered by a threat - a risk.