Confidentiality
Confidentiality is the security property of protecting information from access or disclosure to unauthorized parties.
Real-World Cryptography
Confidentiality is the security property that prevents unauthorized access to or disclosure of data or identities.
- How it is used
- Frames confidentiality as protection against unauthorized access or disclosure, especially when protocols operate in adversarial settings.
- How deep it goes
- Explains confidentiality through symmetric and asymmetric encryption, then stops short of treating encryption alone as secure.
- Examples
- Uses Alice and Bob messages, shared-key encryption, public-key encryption, exposed network traffic, and HTTPS browser communication.
- What you can do after
- Evaluate confidentiality risks in network communication and recognize how encryption protects messages from observers.
Grokking Relational Database Design
Confidentiality is the property that information is accessible and disclosed only to authorized people and processes.
- How it is used
- Applies confidentiality to database design by limiting data access and disclosure to authorized users and processes.
- How deep it goes
- Defines MAC, RBAC, access control, and encryption, then works through RBAC implementation without detailing encryption procedures.
- Examples
- Uses a high-school records scenario and SQL role definitions for standard users, analysts, and administrators.
- What you can do after
- Apply it via MySQL or MariaDB CREATE ROLE, GRANT, CREATE USER, and role-assignment statements.
Read how Grokking Relational Database Design explains confidentiality →
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
Confidentiality is the property that systems and data are accessible only to authorized entities.
- How it is used
- Frames information security around restricting system and data access to authorized entities.
- How deep it goes
- Defines the property, contrasts wired and wireless exposure, explains encryption terminology, and stops short of specifying particular encryption methods.
- Examples
- Uses overheard wireless login information and intercepted communications to illustrate unauthorized disclosure.
- What you can do after
- Evaluate whether an exposure or protection concerns unauthorized access, distinguishing confidentiality from integrity and availability.
Read how Acing the CCNA Exam: Volume 2 Advanced Networking and Security explains confidentiality →
Effective Data Analysis
Confidentiality is the protection of information from unauthorized access, use, or disclosure.
- How it is used
- Sets expectations for participants by disclosing how personal information will be collected, stored, anonymized, and secured.
- How deep it goes
- Details participant-facing disclosures and organizational safeguards but stops short of specifying technical security implementations.
- Examples
- Uses a product analytics survey consent document as its concrete example.
- What you can do after
- Apply it by documenting data collection, anonymization, storage, and security practices before research participation begins.
Software Security for Developers
Confidentiality is the security property that information is accessible only to authorized parties.
- How it is used
- Protects private application data across browsers, services, cloud systems, storage, and network protocols.
- How deep it goes
- Defines the property and surveys encryption choices and AES usage, while deferring the mathematical details behind AES.
- Examples
- Uses browser-to-payment requests, AES deployments, and an encrypted ACME refunds.json exchange.
- What you can do after
- Apply it via AES or JWE to protect application data and distinguish privacy from integrity and authentication.
Read how Software Security for Developers explains confidentiality →
Hacking Cryptography
Confidentiality is the property that data is protected from being viewed by unauthorized parties.
- How it is used
- Protects sensitive data from eavesdroppers during storage and transmission.
- How deep it goes
- Explains the symmetric-key model and Kerckhoff’s principle, but defers detailed cipher construction and attack mechanics.
- Examples
- Uses locked boxes, stolen laptop drives, intercepted messages, Enigma, and symmetric encryption diagrams.
- What you can do after
- Evaluate confidentiality designs by checking key secrecy, implementation robustness, and resistance to unauthorized disclosure.
Lead Developer Career Guide
The obligation and practice of preventing entrusted personal or sensitive information from unauthorized disclosure.
- How it is used
- Builds a safe mentoring relationship where mentees can discuss concerns, insecurities, aspirations, and challenges without fear of judgment or repercussions.
- How deep it goes
- Defines confidentiality through expectations and workplace examples, but stops short of specifying formal policies, legal limits, or information-handling procedures.
- Examples
- Uses mentees’ divorce or illness, a mentor repeating personal information, and candid conversations about challenges as teaching examples.
- What you can do after
- Apply it through clear conversations, patient listening, nonjudgmental support, and restraint when a mentee declines to share with colleagues.
Read how Lead Developer Career Guide explains confidentiality →
Authorization in Action
Confidentiality is the protection of information from unauthorized access during storage, transit, and processing.
- How it is used
- Uses confidentiality to guide authorization, identity, encryption, and governance decisions for protecting sensitive information.
- How deep it goes
- Defines confidentiality, distinguishes it from privacy and authenticity, and explains TLS, metadata exposure, and policy-driven enforcement.
- Examples
- Uses an anonymous health consultation, encrypted TLS packets, visible routing metadata, and transaction-size policy thresholds.
- What you can do after
- Evaluate access designs that protect information content while accounting for metadata, identity, authentication, policy, and usability.
Think Like a Software Engineering Manager
Confidentiality is the protection of information from disclosure to people who are not authorized to receive it.
- How it is used
- Guides managers in communicating sensitive performance, departure, mentoring, and workforce-reduction information.
- How deep it goes
- Provides practical communication rules and boundary-setting advice, but does not detail confidentiality law or technical controls.
- Examples
- Uses employee departures, mentor agreements, and layoff planning as concrete confidentiality scenarios.
- What you can do after
- Operate sensitive team communications by limiting disclosure, clarifying boundaries, and involving appropriate advisers.
Read how Think Like a Software Engineering Manager explains confidentiality →
Related concepts
- CIA triadpart of · The CIA triad is an information-security model comprising confidentiality, integrity, and availability as core protection objectives.
- encryptionaddressed by · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
- cryptographyaddressed by · Cryptography is the study and application of mathematical techniques for protecting information and communications through confidentiality, integrity, authentication, and related security properties.
- stream cipheraddressed by · A stream cipher is an encryption algorithm that combines plaintext sequentially with a generated keystream, typically using XOR.
- sensitive informationkind of · Sensitive information is information requiring protection because its unauthorized access, disclosure, alteration, or misuse could cause harm or violate obligations.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.