data security
andmete turve; andmete kaitse
Õ: (i) pole andmekaitse (data protection) valdkond,
vaid on üks infoturbe osa
(ii) kahe selgesti eri valdkonna lahushoidmiseks
tuleks vältida "andmeturvet", "teabeturvet"
jms meelevaldseid moodustisi
olemus
turvameetmestik, mis on infoturbe ühe osana
suunatud otseselt andmebaaside ja andmeüksuste
kaitsele ohtude eest
=
protecting digital data from destructive forces and from the unwanted actions of unauthorized users
näide
ISO/IEC TR 24714-1: 2008, 4.2.3:
biomeetriaandmeid tuleb kaitsta
lubamatu kasutamise ja ebaseadusliku töötluse eest,
kusjuures varu- ja arhiiviandmete kaitsetase
ei tohi olla madalam tööandmete omast
=
Biometric data should be protected against unauthorized use or unlawful processing. Opportunities for
such misuse should be minimized at the design and development stage of a system. Back-up and archival
data should have the same level of protection as active data.
ülevaateid
https://en.wikipedia.org/wiki/Data_security
https://arxiv.org/pdf/1812.09053.pdf
https://downloads.cloudsecurityalliance.org/initiatives/bdwg/Expanded_Top_Ten_Big_Data_Security_and_Privacy_Challenges.pdf
https://multimedia.3m.com/mws/media/950026O/secure-white-paper.pdf
http://www.aabri.com/manuscripts/121381.pdf
https://www.jhsph.edu/offices-and-services/institutional-review-board/_pdfs-and-docs/ih-nutrition-gdec-data-security-guidelines-final-2011-05-10.pdf
vt ka
- andmete turvapoliitika
- andmete turve teenusena