To get a sense of how system security is established about, we must know the generally accepted architecture of cyber security setups. The Open System Interconnect(OSI) security architecture was designated by the ITU-T (International Telecommunication Union - Telecommunication). The ITU-T decided that their standard "X.800" would be the ISO security architecture.
This standardized architecture defines security requirements and specifies means by which these requirements might be satisfied.
The OSI architecture focuses on
- Security attacks
- Security services
- Security mechanisms
Security attack
An attack is when the security of a system is compromised by some action of a perpetrator. Attacks could either be active attacks or passive attacks.
Security mechanism
A mechanism that is designed to detect, prevent, or recover from a security attack.
Security service
A service that enhances the security of the data processing systems and the information transfers of an organization. The services make use of one or more security mechanisms to provide the service.