Telephone and Availability
1) Consider an automated teller machine (ATM) in which users provide a personal identification number (PIN) and a card for account access
a) Give examples of confidentiality, integrity, and availability requirements associated with the system and, in each case, indicate the degree of importance of the requirement..
Answer:
Confidentiality: The confidentiality of the details and transactions of the money of a user holding the account is very important. The customer of a bank holds the methods and machines of the bank to be responsible for his money, indeed customer expects the use of the account and money to be limited to himself and not anyone else. Any leak of the confidentiality of the account may lead to stealing of the money of a valued customer and his trust over the bank.
Integrity: The details and transactions of the account of a user should be accurate without any mistake. Any mistake may lead to confusion with the user and may require him to take unnecessary troubles of contacting the bank. Apart from accuracy in details the mechanism used in ATM should be accurate in dispensing the correct amount.
Availability: ATM are considered to be one of the main available asset of a bank anytime. Since it is the one of the methods to view transactions and withdraw money at non business hours its availability is very important. A customer always counts on the ATM at anytime of a day for use of his money so the availability of an ATM is very important with regards to business of a bank.
Repeat Problem (a) for a telephone switching system that routes calls through a switching network based on the telephone number requested by the caller.
Confidentiality: Although the confidentiality with the use of telephone should be high, I thing in today's world it is moderate as many agencies are tracking the calls and listening to the conversations if not recording. There is no particular law on the agencies(sometimes government owned) on how, when and why
a) Give examples of confidentiality, integrity, and availability requirements associated with the system and, in each case, indicate the degree of importance of the requirement..
Answer:
Confidentiality: The confidentiality of the details and transactions of the money of a user holding the account is very important. The customer of a bank holds the methods and machines of the bank to be responsible for his money, indeed customer expects the use of the account and money to be limited to himself and not anyone else. Any leak of the confidentiality of the account may lead to stealing of the money of a valued customer and his trust over the bank.
Integrity: The details and transactions of the account of a user should be accurate without any mistake. Any mistake may lead to confusion with the user and may require him to take unnecessary troubles of contacting the bank. Apart from accuracy in details the mechanism used in ATM should be accurate in dispensing the correct amount.
Availability: ATM are considered to be one of the main available asset of a bank anytime. Since it is the one of the methods to view transactions and withdraw money at non business hours its availability is very important. A customer always counts on the ATM at anytime of a day for use of his money so the availability of an ATM is very important with regards to business of a bank.
Repeat Problem (a) for a telephone switching system that routes calls through a switching network based on the telephone number requested by the caller.
Confidentiality: Although the confidentiality with the use of telephone should be high, I thing in today's world it is moderate as many agencies are tracking the calls and listening to the conversations if not recording. There is no particular law on the agencies(sometimes government owned) on how, when and why