The main difference between protection and security is that protection focuses on internal threats to a computer system while security focuses on external threats to a computer system.
An operating system provides a mechanism to avoid interference with logical and physical resources. Protection and security are two of them. Although these two words are used interchangeably, there is a clear difference between protection and security. Protection involves protecting user programs and data from interference by other authorized users of the system. On the other hand, security involves protecting user programs and data from interference by external entities such as unauthorized users of other systems.
Key Areas Covered
1. What is protection?
– Definition, Functionality
2. What is security
– Definition, Functionality
3. What is the difference between protection and security?
– Comparison of key differences
What is protection?
Protection deals with internal system threats. Assume an example as follows. There are four users in a computer system. They are u1, u2, u3 and u4. There are two resources called r1 and r2. User u1 and u2 can only access resource r1. User u3 and u4 can only access resource r2. If user u3 attempts to access resource r1, that user is prevented from accessing that resource. The protection technique handles these insider threats.
There are multiple protection advantages. Allows you to securely share a common logical address space or a common physical address space. Considering the logical address space, if there is a file directory that needs to be shared among multiple users, protection techniques help achieve secure sharing. Given the physical address space, multiple users can access memory. Furthermore, it also provides fair and trustworthy use of resources.
What is security
Security deals with external threats to the computer system. Suppose there is an external user named x who is from another computer. This user is trying to access resources r1 and r2. Since r1 and r2 are internal resources, the external user cannot access them. Security techniques handle these external threats.
Security is defined by three attributes: confidentiality, integrity, and availability. Confidentiality is the prevention of unauthorized modification of information and resources. Integrity is the prevention of unauthorized users. Availability is the prevention of unauthorized retention of information or resources.
External threats can be of two types as direct threats and indirect threats. A direct threat is an attack on the system by a hacker or disgruntled insider. An indirect threat is a random attack, such as a computer virus, worm, Trojan horse, etc.
Difference Between Protection and Security
Protection is a method used in operating systems that manages threats within the system to keep the system working properly. Security is a method used in operating systems that handles threats from outside the system to keep the system working properly. This constitutes the basic difference between protection and security.
The main difference between protection and security is that while protection focuses on internal threats to the system, security focuses on external threats to the system.
Protection provides a mechanism to control access to user programs, processes, and resources. Security provides a mechanism to protect system resources and user resources from external users.
Another difference between protection and security is their policy. The protection policy specifies whether a user can access a specific resource. The owner of the resource performs this function when creating the resource. The security policy specifies whether a person can become a user of the system. It is done by the system administrator.
Furthermore, protection involves mechanisms such as setting or changing protection information for a resource and checking whether a user can access that resource. Security involves mechanisms like adding, removing users, checking if a specific user is authorized, using antimalware software, etc.
There is a clear difference between protection and security, although these two words are used interchangeably. The difference between protection and security is that protection focuses on internal threats to a computer system while security focuses on external threats to a computer system.