Loss Of Integrity

Iinfringements of integrity result from the corruption of an organization’s or user’s data. The direct effect is similar to that of a confidentiality, or disclosure, threat: a compromised network. However, integrity threats extend beyond this, involving the alteration, addition, or deletion of information, which is then passed through the network without the user’s or network administrator’s knowledge. Information that is subject to corruption includes files on the network and data on user devices. For example, a malicious user might use an untrusted device, such as a PDA, to access the address book of another PDA or laptop. However, instead of just monitoring the information, as would be the case with a disclosure threat, the malicious user alters the contact information without the owner’s knowledge or may even delete the information completely. If undetected, such attacks could result in the agency or user losing confidence in its data and system. Users should verify that their Bluetooth product does not allow automatic data synchronization to prevent the alteration of any information without the acknowledgement user of that device.