Information Security Fundamentals

This paper deals with some fundamental concepts within the area of information security, both their definitions and their relationships. The included concepts are information asset, confidentiality, integrity, availability, threat, incident, damage, security mechanism, vulnerability and risk. The concepts and their relations are modeled graphically in order to increase the understanding of conceptual fundamentals within the area of information security.