| Approach (2/3) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| • | The CIA
principles are widely employed to |
||||||||||||
| understand,
uncover, and formulate security |
|||||||||||||
| needs |
|||||||||||||
| – | Confidentiality
concerns unauthorized disclosure |
||||||||||||
| – | Integrity
concerns unauthorized alteration |
||||||||||||
| – | Availability
concerns if information and resources are |
||||||||||||
| accessible when
needed |
|||||||||||||
| • | They can be
limiting for certain applications |
||||||||||||
| – | Other views
include, e.g., non-repudiation |
||||||||||||
| IETF 75 - ROLL
WG, July 2009 |
| 5 of 13 |