Security Requirements
Authentication - establishing proof of identity
Access Control - regulating access to some object (also called “authorization”)
Integrity - detecting that the data is not tampered with.
Confidentiality - maintaining the privacy of sensitive data
Non-repudiation - ability to prove that the sender actually sent the data