What does "data integrity" refer to in the context of security?

Data integrity is a fundamental component of the information security model known as the CIA triad (Confidentiality, Integrity, Availability). It refers to the assurance that data is accurate, complete, and has not been altered or corrupted in an unauthorized manner. This principle ensures the trustworthiness and reliability of data throughout its entire lifecycle, protecting it from intentional or accidental modification. Mechanisms like hashing algorithms (e.g., SHA-256) and digital signatures are commonly used to verify data integrity.

A. Preventing data loss during power outages relates to availability, which ensures that systems and data are accessible when needed.

B. Encrypting data during transmission is a primary mechanism for ensuring confidentiality, although it can also contribute to integrity.

C. Protecting data from unauthorized disclosure is the definition of confidentiality, another distinct pillar of the CIA triad.

1. Cisco Press. (2015). CCNA Security 210-260 Official Cert Guide. In Chapter 1, "Modern Network Security Threats," under the section "The CIA Triad," integrity is defined as "the assurance that information has not been modified by unauthorized people or processes." This directly supports the concept of data being accurate and reliable. (Cisco Press, ISBN: 978-1587205668, Chapter 1, p. 8).

2. National Institute of Standards and Technology (NIST). (2017). NIST Special Publication 800-53 Revision 5: Security and Privacy Controls for Information Systems and Organizations. In Appendix F, "Security Control and Enhancement Index," Integrity is defined as "The property whereby information is not altered or destroyed in an unauthorized manner." This aligns with ensuring data accuracy. (NIST SP 800-53 Rev. 5, Appendix F, p. F-17).

3. Purdue University. Courseware for CS 42600: Computer Security. In the lecture notes on "Introduction to Security," the CIA triad is explained. Data Integrity is described as "prevention of unauthorized modification of data," which ensures the data remains accurate and trustworthy. (Available via Purdue University's Computer Science department course materials).