Question

Network Security

Consider an automated teller machine (atm) in which users provide a personal identification number (pin) and a card for account access. Give examples of confidentiality, integrity, and availability requirements associated with the system and, in each case, indicate the degree of importance of the requirement.

Answer 1

The example of Confidentiality in this example will be the personal details such as the Card Details,PIN number etc must be kept secret and it should not be exposed to the outside world and accessible to the third person.

In terms of the importance it is of Prime importance because if it is not confidential then it can be misused.

Integrity refers to the fact that the details provided is not corrupted on its way to the bank server,If it becomes corrupted or forged then the service will be denied and the account may get locked.

Availability refers to the fact that the service should be available 24X7 and it should not be prone to Denial of Service Attack wherein a attacker will overload the server to deny the service for other people.

In terms of importance all these requirements are highly important but Confidentiality should be of prime importance compared to other requirements.