Anecdotes About Formosa: Western People’s First Encounter With Taiwan During the 1622-1895 Period

Taiwan, my beloved country!

Own history and retrospective guide us to affirm who we are and where we are going, and lead us to a better future.

Claim Your Dream 2017 by Denzel Washington

Without commitment, you will never start.
But more importantly, without consistency, you will never finish.

It’s not easy.

Keep striving, never give up.
Fall down seven times, get up eight.
Ease is a greater threat to progress than hardship.
So, keep moving, keep going, keep learning.

The diagram and the following concepts are addressed in the official study guide, (ISC)2 CISSP Certified Information Systems Security Professional Official Study Guide:

• Auditing: recording a log of the events and activities related to the system and subjects.
• Accounting (aka accountability): reviewing log files to check for compliance and violations in order to hold subjects accountable for their actions.

But I don’t agree with it,  I would address Accounting, Auditing, and Accountability as follows:

Accountability can be concluded through auditing, an independent and systematic security assessment. Accounting is the process of writing logs of the activities of subjects and objects. An audit trail is a collection of logs to conclude accountability. Log review is one of the most common security assessment techniques used in an information systems audit.

In summary,

• Accountability is concluded by auditing.
• Auditing is an independent and systematic security assessment; log review is one of the most common security assessment techniques.
• Accounting produces logs as audit trails to support auditing.
• Logs reflect the activities of the authenticated subject.

Your feedback and comment are always welcome!

The following is my response to the post as above from Luke’s CISSP group:

According to NIST SP 800-88 R1, it depends on the data types the system was processing or the system category. If the workstation in question was categorized as High impact system, the media must be purged, while Low or Medium be cleared (erase or delete).

Since this question does not provide a specific context, the BEST way to recycle and protect sensitive data from leaking is “purge”.

The following is my response to the post as above from Luke’s CISSP group:

Definitions

• A session is an interaction between two parties using a communication channel that can be set up and torn down by either party during a period of time.
• A data link is a logical connection between two adjacent nodes for data transmission.

Justifications

• PPTP is a protocol that sets up a VPN tunnel as a logical connection between the VPN client and the VPN server. PPTP works at the data link layer, or logical link control (LLC) layer specifically, in terms of its result, the tunnel.
• The VPN client authenticates to the VPN server to set up the VPN tunnel as the communication channel that can be set up and torn down by either party during a period of time. From the perspective of the tunnel building process, it’s reasonable to argue that PPTP works at the session layer.

Personally, I consider PPTP a layer 2 (data link layer) protocol.