The CIA Strikes Back: Redefining Confidentiality, Integrity and Availability in Security
The CIA Strikes Back: Redefining Confidentiality, Integrity and Availability in Security
复制标题
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
Spyridon Samonas;D. Coss
中科院分区：
文献类型：
--
作者：
Spyridon Samonas;D. Coss
本文从信息安全从业人员和学者的角度回顾了CIA(机密性、完整性和可用性)三合会的历史。虽然前者相信三合会的技术取向是资讯保安的独特参照点，但后者则质疑三合会S处理自本世纪头十年以来保安方面出现的广泛社会技术问题的能力。通过重温三合会的主要原则，本文调和了这两种看似支离破碎的方法。主要的论点是，中央情报局的三合会将继续在信息安全实践中发挥重要作用。然而，这并不是因为从业人员放弃或拒绝了社会技术安全学者多年来提出的加强措施，而是因为这些加强措施可以通过对最初的中央情报局三合会进行更广泛的重新概念化来实现。文章最后指出了未来研究的潜在领域。
This paper reviews the history of the CIA (Confidentiality, Integrity and Availability) triad from the perspectives of information security practitioners and scholars. Whilst the former have trusted the technical orientation of the triad as a unique point of reference in information security, the latter have questioned the triad ’s capacity of addressing the breadth of socio-technical issues that have emerged in security since the 2000s. Through a revisiting of the key tenets of the triad, the paper reconciles these two, seemingly fragmented, approaches. The main argument is that the CIA triad will continue to assume a major role in information security practice. However, this is not due to the fact that practitioners have discarded, or rejected the enhancements that socio-technical security scholars have proposed over the years; rather, it is because these enhancements can be accommodated by a broader re-conceptualization of the original CIA triad. The paper concludes with potential areas for future research.