What Is Security?

Security, in the context of information and communications technology, is the practice of protecting computers, networks, programs, and the data they hold from unauthorized access, damage, or attack. It encompasses the policies, processes, and technical controls that an organization uses to preserve the confidentiality, integrity, and availability of its information assets. The field spans physical security of hardware, software security of applications and operating systems, network security of communication infrastructure, and the governance frameworks that coordinate these layers into a coherent defense.

Security draws its conceptual foundations from cryptography, risk management, and systems engineering. The CIA triad, confidentiality, integrity, and availability, provides the canonical model for defining security objectives: confidentiality ensures that information is accessible only to authorized parties; integrity ensures that information is accurate and unmodified; and availability ensures that authorized users can access information and systems when needed. The NIST Cybersecurity Framework, first published in 2014 and updated in version 2.0, organizes security practices into six functions: Govern, Identify, Protect, Detect, Respond, and Recover, providing a widely adopted structure for both assessing and improving an organization's security posture.

Threat Detection and Prevention

A central function of security operations is identifying and neutralizing threats before they cause harm. Anti-virus and anti-malware software detect known malicious code using signature databases supplemented by behavioral heuristics that flag unknown samples exhibiting suspicious execution patterns. Intrusion detection systems (IDS) and intrusion prevention systems (IPS) monitor network traffic for anomalous patterns associated with scanning, exploitation, or lateral movement. Security information and event management (SIEM) platforms aggregate log data from across an environment, correlating events from firewalls, endpoints, and identity systems to surface incidents that are invisible when any single data source is examined in isolation. The NIST Cybersecurity and Privacy resources document how these detection mechanisms are organized into a tiered defense architecture, with automated tooling handling high-volume, low-fidelity alerts and human analysts focusing on complex, cross-system incidents.

Access Control and Identity Management

Access control determines who or what may interact with a protected resource, and under what conditions. Authentication mechanisms verify identity through something a user knows (passwords, PINs), something they have (hardware tokens, smart cards), or something they are (biometric identifiers such as fingerprint or iris patterns). Multi-factor authentication combining two or more of these factors substantially reduces the risk of credential-based compromise. Authorization frameworks such as role-based access control (RBAC) and attribute-based access control (ABAC) enforce the principle of least privilege, granting each identity only the permissions required for its function. Physical unclonable functions (PUFs) extend hardware-rooted identity to embedded devices, providing instance-specific authentication tokens derived from manufacturing variation rather than stored secrets.

Data and System Protection

Protection of data and systems encompasses the controls applied to data at rest, in transit, and in use, as well as the hardening of the systems that process it. Encryption at the storage and transport layers prevents disclosure of data to parties who obtain unauthorized access to media or network traffic. System hardening removes unnecessary services, closes unneeded ports, and applies vendor security patches on a defined schedule. Product security, an emerging sub-discipline, applies security engineering to the entire lifecycle of a product from design through end-of-life decommissioning. The IEEE Communications and Network Security research series covers both the technical controls and the adversarial research that drives improvements in each of these protection domains.

Applications

Security has applications in a wide range of disciplines, including:

• Enterprise IT protecting corporate networks, endpoints, and cloud environments
• Energy infrastructure security for power grids and industrial control systems
• Financial services compliance with PCI-DSS, SOX, and banking regulations
• Healthcare systems protecting patient data under HIPAA and GDPR frameworks
• Business continuity planning and disaster recovery for critical services
• National defense and government systems protecting classified information