Question

Difficulty: EasyCIA Triad and Non-Repudiation

A software distribution platform requires package maintainers to cryptographically sign all published updates. This ensures that a maintainer cannot later deny having created and released a specific update package. Which of the following security concepts is best demonstrated by this requirement?

  1. Non-repudiationAnswer
  2. B
    Confidentiality
  3. C
    Integrity
  4. D
    Availability

Answer

Non-repudiation
Non-repudiation provides proof of the origin and authenticity of data, ensuring that an individual or entity cannot deny having performed a specific action, such as creating or signing a software update package.

Step-by-Step Solution

1
Analyze the scenario requirement.
The requirement mandates signing software updates so maintainers cannot deny creating and releasing them.
Identifying the core goal (preventing denial of an action) isolates the security principle being applied.
2
Map the requirement to fundamental security principles.
Providing cryptographic proof of origin to prevent denial of authorship defines non-repudiation.
Digital signatures associate an identity with specific data to enforce accountability and non-repudiation.

Key Concept

CIA Triad and Non-Repudiation
Rate this question