Editing Information security (section)

==== Integrity ====
In IT security, [[data integrity]] means maintaining and assuring the accuracy and completeness of data over its entire lifecycle.<ref>{{cite journal |last=Boritz |first=J. Efrim |year=2005 |title=IS Practitioners' Views on Core Concepts of Information Integrity |journal=International Journal of Accounting Information Systems |publisher=Elsevier |volume=6 |issue=4 |pages=260–279 |doi=10.1016/j.accinf.2005.07.001}}</ref> This means that data cannot be modified in an unauthorized or undetected manner.<ref>{{Cite journal |last=Hryshko |first=I. |date=2020 |title=Unauthorized Occupation of Land and Unauthorized Construction: Concepts and Types of Tactical Means of Investigation |journal=International Humanitarian University Herald. Jurisprudence |issue=43 |pages=180–184 |doi=10.32841/2307-1745.2020.43.40 |issn=2307-1745 |doi-access=free}}</ref> This is not the same thing as [[referential integrity]] in [[databases]], although it can be viewed as a special case of consistency as understood in the classic [[ACID]] model of [[transaction processing]].<ref>{{Citation |last=Kim |first=Bonn-Oh |title=Referential Integrity for Database Design |date=2000-09-21 |work=High-Performance Web Databases |pages=427–434 |url=http://dx.doi.org/10.1201/9781420031560-34 |access-date=2021-05-29 |publisher=Auerbach Publications |doi=10.1201/9781420031560-34 |isbn=978-0-429-11600-1|url-access=subscription }}</ref> Information security systems typically incorporate controls to ensure their own integrity, in particular protecting the kernel or core functions against both deliberate and accidental threats.<ref>{{Cite journal |last=Pevnev |first=V. |date=2018 |title=Model Threats and Ensure the Integrity of Information |journal=Systems and Technologies |volume=2 |issue=56 |pages=80–95 |doi=10.32836/2521-6643-2018.2-56.6 |issn=2521-6643 |doi-access=free}}</ref> Multi-purpose and multi-user computer systems aim to compartmentalize the data and processing such that no user or process can adversely impact another: the controls may not succeed however, as we see in incidents such as malware infections, hacks, data theft, fraud, and privacy breaches.<ref>{{Cite journal |last1=Fan |first1=Lejun |last2=Wang |first2=Yuanzhuo |last3=Cheng |first3=Xueqi |last4=Li |first4=Jinming |last5=Jin |first5=Shuyuan |date=2013-02-26 |title=Privacy theft malware multi-process collaboration analysis |journal=Security and Communication Networks |volume=8 |issue=1 |pages=51–67 |doi=10.1002/sec.705 |issn=1939-0114 |doi-access=free}}</ref>

More broadly, integrity is an information security principle that involves human/social, process, and commercial integrity, as well as data integrity. As such it touches on aspects such as credibility, consistency, truthfulness, completeness, accuracy, timeliness, and assurance.<ref>{{Cite book |title=Measuring Data Quality for Ongoing Improvement |date=2013 |publisher=Elsevier |isbn=978-0-12-397033-6 |series=MK Series on Business Intelligence |pages=e11–e19 |chapter=Completeness, Consistency, and Integrity of the Data Model |doi=10.1016/b978-0-12-397033-6.00030-4 |access-date=2021-05-29 |chapter-url=http://dx.doi.org/10.1016/b978-0-12-397033-6.00030-4}}</ref>