The Many Faces of Security 2004-01-0236

There are many analogies between physical security and information security. Both are concerned with protecting something of value, and both have many aspects that need to be considered to ensure the development of cost effective security practices. Repositories for items of value become targets for theft, and the transport of items of value increases the risk for theft. Some major differences between physical security and information security are the higher risk of malicious attacks with information networks, the exposure of wireless information during transmission, and that information can be stolen without being physically removed. This paper highlights the many faces of security and provides concrete examples from the literature of common security breaches, security problems and security solutions that are relevant to vehicle information systems, and tradeoffs. Emphasis is placed on the need for the development of security policies, the important role of economics in the business of security, and the recognition that security by its nature is evolutionary and not absolute.