Foundation of information security