Information Security Overview

Principles

Definition

Information security is the academic and professional discipline dedicated to protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. This field investigates the principles, methods, and technologies required to ensure the confidentiality, integrity, and availability of information assets, addressing risks and establishing trust in digital environments.

Ontological type

Core Principles

Security Mechanisms

Threat Models

Key developments

Key Figures

Provable Public-Key Cryptography era

Silvio Micali [1] emerged as a leading figure in Provable Public-Key Cryptography during 1977-2000, affiliated with Massachusetts Institute of Technology [3] and University of California, Berkeley [4]. His key contributions in this era include A Digital Signature Scheme Secure Against Adaptive Chosen-Message Attacks [7] and Verifiable secret sharing and achieving simultaneity in the presence of faults [8], which helped formalize security notions and enable robust, provable protocols essential for encryption, signatures, and multiparty computation. Paul C. van Oorschot [2], with affiliations at University of Waterloo [5] and Carleton University [6], played a pivotal role in advancing authenticated key exchange research during this era. His 1992 work Authentication and authenticated key exchanges [9] helped formalize practical secure protocols and bridge theoretical reductions to real-world network security.

Pairing and Attribute Cryptography era

Amit Sahai [1] is associated with Harvard University [3] and Massachusetts Institute of Technology [4] in this era. Sahai [1] helped pioneer Attribute-based encryption for fine-grained access control of encrypted data [7], a landmark that enabled policy-based access to ciphertext and simplified key management in the pairing and attribute-based cryptography era. Brent Waters [2] has affiliations with Stanford University [5] and the Weizmann Institute of Science [6] in this era. Waters [2] co-authored Attribute-based encryption for fine-grained access control of encrypted data [7], and his work helped expand ABEs for practical, fine-grained access control and policy-based cryptography during this era.

Decentralized IoT Security era

Ali A. Ghorbani [1] is a prominent researcher whose work spans institutions such as Nanyang Technological University [3] and the University of Hong Kong [4] in this era. His 2018 work Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization [7] contributed to shaping empirical benchmarks and traffic profiling for IoT security in decentralized settings, a crucial step for evaluating lightweight and distributed defense mechanisms in this era. Neeraj Kumar [2] is associated with Huazhong University of Science and Technology [5] and the University of Illinois Chicago [6] during this period. His contributions across papers such as Design of Secure User Authenticated Key Management Protocol for Generic IoT Networks [8], Security and Privacy for the Internet of Drones: Challenges and Solutions [9], and Secure Remote User Authenticated Key Establishment Protocol for Smart Home Environment [10] advanced secure key management, authentication, and privacy-preserving mechanisms essential for scalable, cross-layer IoT governance in decentralized ecosystems.