The Computer Security Act of 1987, Public Law No. 100-235, was a United States federal law enacted in 1987. It was intended to improve the security and privacy of sensitive information in federal computer systems and to establish minimally acceptable security practices for such systems.

https://en.wikipedia.org/wiki/Computer_Security_Act_of_1987

https://www.youtube.com/watch?v=L_e6YrH8pJ4

APIs often expose endpoints that handle object identifiers, creating a wide potential attack surface. Object level authorization is an access control mechanism usually implemented at the code level to validate a user’s ability to access a given object. Authorization and access control mechanisms in modern applications are complex and wide-spread. Even if an application implements a proper infrastructure for authorization checks, developers often forget to apply these checks before accessing an object.

https://salt.security/blog/api1-2019-broken-object-level-authentication

https://www.youtube.com/watch?v=6HnF5s0jnQA

Computer Security Incident Response Team (CSIRT) is a dedicated group of individuals who respond to security incidents that occur within an organization's information technology (IT) environment. They are responsible for detecting, investigating, and resolving security incidents, as well as implementing measures to prevent similar incidents from happening in the future.

The main goal of a CSIRT is to protect an organization's IT assets, including its data, systems, and networks, from unauthorized access, modification, or destruction. To achieve this goal, a CSIRT may use a variety of tools, such as firewalls, intrusion detection systems, and vulnerability scanners, to monitor the organization's IT environment and detect security incidents.

When a security incident is detected, the CSIRT will initiate its incident response process. This process typically involves the following steps:

- Preparation: CSIRT members must be trained and equipped to respond to security incidents in a timely and effective manner.

- Identification: The CSIRT must determine the nature and scope of the security incident.

- Containment: The CSIRT must take steps to contain the damage caused by the security incident and prevent it from spreading.

- Analysis: The CSIRT must analyze the security incident to determine the cause and extent of the damage.

- Eradication: The CSIRT must take steps to eradicate the cause of the security incident.

- Recovery: The CSIRT must restore normal operations as quickly as possible.

- Lessons learned: The CSIRT must evaluate the incident response process and make recommendations for improving the organization's security posture.

A well-functioning CSIRT can help an organization minimize the damage caused by security incidents and minimize the likelihood of future incidents.

https://en.wikipedia.org/wiki/Computer_security_incident_management

https://www.youtube.com/watch?v=NL1ShMo4Gm4

Computer (and Network) Security Incident Response

The Central Security Service (CSS) is a joint military and intelligence organization of the United States Department of Defense. It was established in 1972 to promote cooperation and coordination between the U.S. military's signals intelligence (SIGINT) components, such as the National Security Agency (NSA), and the U.S. military's information assurance components. The CSS works closely with the NSA to provide secure communications and to improve the sharing of signals intelligence information between the military and the intelligence community. The CSS also provides support to military operations through the collection and analysis of signals intelligence and the protection of military communications networks and systems.

https://en.wikipedia.org/wiki/Central_Security_Service

https://www.youtube.com/watch?v=AnjLjIbeu8s

The National Security Agency (NSA) is a U.S. intelligence organization responsible for the collection, analysis, and dissemination of signals intelligence (SIGINT) to support national security objectives. It is headquartered in Fort Meade, Maryland and is part of the Department of Defense. The NSA's mission is to protect the U.S. national security systems and to produce foreign signals intelligence in support of U.S. national security objectives. The NSA has been in the news in recent years due to its controversial surveillance programs, which have raised questions about privacy and civil liberties.

https://www.youtube.com/watch?v=AnjLjIbeu8s

The Advanced Encryption Standard (AES) is a symmetric encryption algorithm that is widely used across the world to secure data. It was first standardized in 2001 by the US National Institute of Standards and Technology (NIST) and has since become one of the most widely used encryption algorithms.

AES uses a fixed block size of 128 bits and can use key sizes of 128, 192, or 256 bits. The algorithm uses substitution-permutation network (SPN) structure, in which data is processed in fixed-size blocks and undergoes a series of substitutions and permutations to scramble the data.

AES encryption is widely used in a variety of applications, including securing data transmission over the internet, encryption of sensitive information in databases, and in secure storage devices such as USB drives and memory cards.

The AES algorithm has been extensively analyzed and is considered to be highly secure, provided that the key is kept secret. However, it is important to use AES correctly and securely, as any weaknesses in the implementation or use of the algorithm can compromise the security of the encrypted data.

https://en.wikipedia.org/wiki/Advanced_Encryption_Standard

https://www.youtube.com/watch?v=O4xNJsjtN6E

Asynchronous Transfer Mode (ATM) is a type of cell-based networking technology that was designed to provide high-speed communication over wide area networks (WANs) and local area networks (LANs). It is an efficient, high-speed method of transmitting data over a network.

ATM uses a small, fixed-sized cell of 53 bytes to transmit data, as opposed to traditional networking technologies that used variable-sized packets. This makes it well-suited for time-sensitive applications such as video and audio streaming, where lost or delayed packets can result in a noticeable degradation of quality.

ATM is also capable of supporting multiple service types, such as voice, video, and data, on the same network, allowing for more efficient use of network resources. Additionally, ATM's cell-based structure provides built-in quality of service (QoS) guarantees, which are important for ensuring that high-priority traffic is transmitted ahead of lower-priority traffic.

While ATM was once seen as the future of networking technology, its popularity has declined in recent years as other technologies, such as Ethernet and Internet Protocol (IP), have become more widely adopted. However, ATM continues to be used in certain applications where its characteristics make it well-suited, such as in backbone networks and in the telecommunications industry.

https://en.wikipedia.org/wiki/Asynchronous_Transfer_Mode

https://www.youtube.com/watch?v=1k4Z4hEcA20

The BIOS, or Basic Input/Output System, is a low-level software that is installed on a computer's motherboard. It acts as a bridge between the computer's hardware and the operating system. The BIOS performs a power-on self-test (POST) when the computer is first started, and initializes and identifies system components, such as the CPU, memory, and hard drive.

Additionally, the BIOS provides a user-configurable setup utility that allows you to change system settings, such as the time and date, the boot order of devices, and system security options. The BIOS also provides an interface for accessing and controlling certain hardware devices, such as the keyboard and mouse.

In modern computers, the BIOS has largely been replaced by the Unified Extensible Firmware Interface (UEFI), which provides more advanced features and capabilities compared to the traditional BIOS.

https://en.wikipedia.org/wiki/Asynchronous_Transfer_Mode

https://www.youtube.com/watch?v=zIYkol851dU

Secure Shell (SSH) is a network protocol that provides secure encrypted communications between two untrusted hosts over an insecure network. It is widely used to log into a remote machine and execute commands, but it also supports tunneling, forwarding TCP ports and X11 connections.

SSH provides strong authentication and secure encrypted communications between two untrusted hosts, for example between a client and a server. The protocol consists of two components: the SSH client and the SSH server. The SSH client is used to establish a secure and encrypted connection to the SSH server, while the SSH server provides secure encrypted communications between the client and the server.

SSH is typically used to log into a remote machine and execute commands, but it also supports other services like SFTP (Secure File Transfer Protocol) and SCP (Secure Copy Protocol), which provide secure encrypted file transfer services.

In summary, SSH is an essential tool for network administrators, system administrators and developers for secure remote access to systems and for securely transferring files between systems.

https://en.wikipedia.org/wiki/Secure_Shell

https://www.youtube.com/watch?v=ORcvSkgdA58

(CSA) Computer Security Act