In the last lecture, we talked about confidentiality, let us move on to integrity.
So what is integrity?
Well, integrity is ensuring that information is not modified when it is in storage or it is being transferred
from one medium to another.
Integrity also means that ensuring only authorized modifications are made.
That is, only people who are authorized to do it can access the data or can make any changes.
Integrity also means that ensuring that data is accurate, authentic and safe from unauthorized access
in order for users to be able to rely on the correctness of data when the information is being processed.
So basically, integrity means the data should only be changed by authorized people and the data should
not be made available to be written on or to be changed by unauthorized Third-Party users or attackers.
Now, one of the most important principles of integrity is data must be complete and intact unless and
until it is being modified by unauthorized people.
For example, the accounting data must be authentic.
That is complete and exact.
The accuracy of information is ensured by avoiding unjustified alterations of such information.
Now, many devices manipulating data, including disk drives and other media, as well as communication
systems, contain the devices for automatic data integrity verification.
Data integrity controls are essential in operating systems, software and applications.
They allow the avoidance of intentional of involuntary corruption of programs and data.
Now, let me tell you one thing that data controls must be included in the procedures during audits.
Now, these contribute to the reduction in the risk of error, theft and fraud.
Data validation controls user trainings as well as controls at the operational level are good examples
to prevent the integrity of data.
Now, when it comes to integrity, it must be analyzed from three perspectives.
First, being proven, someone with authority to modify from making changes and data that is previously
stored must remain unchanged during the data transportation.
Otherwise, you know, there's no point in maintaining the integrity of the data.
Now data can experience damages due to storage regions, natural or intentional errors.
And if there are any system damages now, let us have an example of the integrity.
So this is Bob, and this is truly and, you know, Bob is trying to send something and he's trying
to tell his account number, let's say, for example, he's trying to say Dell account number two alist.
Meanwhile, Judy, she's very naughty.
What she's doing is she's not allowing Bob's message to get delivered to Alice by using some malicious
hacks.
And meanwhile, she can read this data so she understands that, OK, Bob is sending account number
to Alice, his account number.
What I'll do is I'll send my account number instead.
So here the order, the data that is original account number of Bob is getting altered and is getting
replaced with Trute.
In this case, the integrity of the data is being violated.
This is mean that not this account number is supposed to be only changed by Bob or it is only to be
known by Alice.
So in this case, Trudy can access this data, which means there is a loss of confidentiality as well
as Stuart is able to modify it and then send the next message to Alice with her own account number.
So this is also the violation of integrity principle.
I hope you understand the integrity principle.
And in the next lecture, we will talk about the third and the most important principle of the elements
of information security.
That is the availability.
I will see you in the next lecture.