Security, privacy and integrity
Cyber security Lesson 1 2:08 English narration · English + 中文 subtitles burned in
Chapters
Transcript
Three words get used as if they meant the same thing, and the exam asks you to separate them.
有三个词常被当成同一个意思用，而考试要求你把它们分开。
Security is about keeping data and systems safe from people who should not have access.
安全，是关于把数据和系统保护起来，不让不该有权限的人碰到。
Privacy is your right to control who sees your personal data.
隐私，是你自己决定谁能看到你个人数据的权利。
And integrity means the data is accurate and complete, and has not been changed by accident or by an attack.
而完整性，指的是数据准确、完备， 没有被意外或攻击改动过。
One example separates them properly.
一个例子就能把它们干净地分开。
A hospital stores this patient record.
一家医院存着这条病人记录。
Security asks: can an outsider get into the system at all — that is locks and passwords.
安全问的是：外面的人能不能进到这个系统里来——那是锁和密码的事。
Privacy asks: even inside, may this particular person look?
隐私问的是：就算进来了，这个人有没有资格看？
Only their own doctor should.
应该只有他自己的医生可以。
And integrity asks: is the blood type still what it should be?
而完整性问的是：血型还是它本来该是的那个值吗？
A wrong value there could be deadly, and no password would have stopped it.
那里一个错误的值可能会要命，而任何密码都拦不住它。
The exam names all three goals together as the CIA triad.
考纲把这三个目标合起来叫做 CIA 三要素。
Confidentiality: only the right eyes see it.
机密性：只有该看的人能看到。
Integrity: it has not been changed.
完整性：它没有被改动过。
Availability: it still works when needed — a system nobody can reach has failed, even if nothing was stolen.
可用性：需要的时候它还能用—— 一个谁都连不上的系统就是失败的，哪怕什么都没被偷走。
Every attack in this course threatens at least one of these three.
这门课里的每一种攻击，至少威胁这三者中的一个。
And there are two things to protect, not one.
而要保护的东西有两样，不是一样。
The system, so it keeps running.
系统，让它能一直运转。
And the data, so it stays correct and secret.
还有数据，让它保持正确和保密。
Ransomware attacks the system; a quietly tampered record attacks the data.
勒索软件攻击的是系统；一条被悄悄篡改的记录攻击的是数据。
A threat to all three goals can come from either direction, which is why the defences later in this course come in layers.
对这三个目标的威胁可以来自任何一边， 这也是为什么这门课后面讲的防御是分层的。
Four things to take with you.
带走四点。
One: security keeps out people who should not have access.
第一：安全是把不该有权限的人挡在外面。
Two: privacy is your right to control who sees your data.
第二：隐私是你决定谁能看你数据的权利。
Three: integrity means the data is still accurate.
第三：完整性意味着数据仍然是准确的。
Four: the CIA triad is confidentiality, integrity, availability.
第四：CIA 三要素是机密性、完整性、可用性。
Now do the tasks below.
现在去做下面的题。