title: Computer security

text: Tampering describes a malicious modification or alteration of data. An intentional but unauthorized act resulting in the modification of a system, components of systems, its intended behavior, or data. So-called Evil Maid attacks and security services planting of surveillance capability into routers are examples.


title: Computer security

text: Malicious software (malware) installed on a computer can leak any information, such as personal information, business information and passwords, can give control of the system to the attacker, and can corrupt or delete data permanently.


title: Computer security

text: Employee behavior can have a big impact on information security in organizations. Cultural concepts can help different segments of the organization work effectively or work against effectiveness toward information security within an organization. Information security culture is the "...totality of patterns of behavior in an organization that contributes to the protection of information of all kinds."


title: Computer security

text: Andersson and Reimers (2014) found that employees often do not see themselves as part of their organization's information security effort and often take actions that impede organizational changes. Indeed, the Verizon Data Breach Investigations Report 2020, which examined 3,950 security breaches, discovered 30% of cybersecurity incidents involved internal actors within a company. Research shows information security culture needs to be improved continuously. In "Information Security Culture from Analysis to Change", authors commented, "It's a never-ending process, a cycle of evaluation and change or maintenance." To manage the information security culture, five steps should be taken: pre-evaluation, strategic planning, operative planning, implementation, and post-evaluation.


title: Computer security

text: The growth in the number of computer systems and the increasing reliance upon them by individuals, businesses, industries, and governments means that there are an increasing number of systems at risk.


title: Computer security

text: The computer systems of financial regulators and financial institutions like the U.S. Securities and Exchange Commission, SWIFT, investment banks, and commercial banks are prominent hacking targets for cybercriminals interested in manipulating markets and making illicit gains. Websites and apps that accept or store credit card numbers, brokerage accounts, and bank account information are also prominent hacking targets, because of the potential for immediate financial gain from transferring money, making purchases, or selling the information on the black market. In-store payment systems and ATMs have also been tampered with in order to gather customer account data and PINs.


title: Computer security

text: Computers control functions at many utilities, including coordination of telecommunications, the power grid, nuclear power plants, and valve opening and closing in water and gas networks. The Internet is a potential attack vector for such machines if connected, but the Stuxnet worm demonstrated that even equipment controlled by computers not connected to the Internet can be vulnerable. In 2014, the Computer Emergency Readiness Team, a division of the Department of Homeland Security, investigated 79 hacking incidents at energy companies.


title: Computer security

text: The aviation industry is very reliant on a series of complex systems which could be attacked. A simple power outage at one airport can cause repercussions worldwide, much of the system relies on radio transmissions which could be disrupted, and controlling aircraft over oceans is especially dangerous because radar surveillance only extends 175 to 225 miles offshore. There is also potential for attack from within an aircraft.


title: Computer security

text: In Europe, with the (Pan-European Network Service) and NewPENS, and in the US with the NextGen program, air navigation service providers are moving to create their own dedicated networks.


title: Computer security

text: The consequences of a successful attack range from loss of confidentiality to loss of system integrity, air traffic control outages, loss of aircraft, and even loss of life.


title: Computer security

text: Desktop computers and laptops are commonly targeted to gather passwords or financial account information or to construct a botnet to attack another target. Smartphones, tablet computers, smart watches, and other mobile devices such as quantified self devices like activity trackers have sensors such as cameras, microphones, GPS receivers, compasses, and accelerometers which could be exploited, and may collect personal information, including sensitive health information. WiFi, Bluetooth, and cell phone networks on any of these devices could be used as attack vectors, and sensors might be remotely activated after a successful breach.


title: Computer security

text: The increasing number of home automation devices such as the Nest thermostat are also potential targets.


title: Computer security

text: Large corporations are common targets. In many cases attacks are aimed at financial gain through identity theft and involve data breaches. Examples include the loss of millions of clients' credit card and financial details by Home Depot, Staples, Target Corporation, and Equifax.


title: Computer security

text: Medical records have been targeted in general identify theft, health insurance fraud, and impersonating patients to obtain prescription drugs for recreational purposes or resale. Although cyber threats continue to increase, 62% of all organizations did not increase security training for their business in 2015.


title: Computer security

text: Not all attacks are financially motivated, however: security firm HBGary Federal had a serious series of attacks in 2011 from hacktivist group Anonymous in retaliation for the firm's CEO claiming to have infiltrated their group, and Sony Pictures was hacked in 2014 with the apparent dual motive of embarrassing the company through data leaks and crippling the company by wiping workstations and servers.


title: Computer security

text: Vehicles are increasingly computerized, with engine timing, cruise control, anti-lock brakes, seat belt tensioners, door locks, airbags and advanced driver-assistance systems on many models. Additionally, connected cars may use WiFi and Bluetooth to communicate with onboard consumer devices and the cell phone network. Self-driving cars are expected to be even more complex. All of these systems carry some security risk, and such issues have gained wide attention.


title: Computer security

text: Simple examples of risk include a malicious compact disc being used as an attack vector, and the car's onboard microphones being used for eavesdropping. However, if access is gained to a car's internal controller area network, the danger is much greater – and in a widely publicized 2015 test, hackers remotely carjacked a vehicle from 10 miles away and drove it into a ditch.


title: Computer security

text: Manufacturers are reacting in numerous ways, with Tesla in 2016 pushing out some security fixes "over the air" into its cars' computer systems. In the area of autonomous vehicles, in September 2016 the United States Department of Transportation announced some initial safety standards, and called for states to come up with uniform policies.


title: Computer security

text: Government and military computer systems are commonly attacked by activists and foreign powers. Local and regional government infrastructure such as traffic light controls, police and intelligence agency communications, personnel records, student records, and financial systems are also potential targets as they are now all largely computerized. Passports and government ID cards that control access to facilities which use RFID can be vulnerable to cloning.


title: Computer security

text: The Internet of things (IoT) is the network of physical objects such as devices, vehicles, and buildings that are embedded with electronics, software, sensors, and network connectivity that enables them to collect and exchange data. Concerns have been raised that this is being developed without appropriate consideration of the security challenges involved.


title: Computer security

text: While the IoT creates opportunities for more direct integration of the physical world into computer-based systems,


title: Computer security

text: it also provides opportunities for misuse. In particular, as the Internet of Things spreads widely, cyberattacks are likely to become an increasingly physical (rather than simply virtual) threat. If a front door's lock is connected to the Internet, and can be locked/unlocked from a phone, then a criminal could enter the home at the press of a button from a stolen or hacked phone. People could stand to lose much more than their credit card numbers in a world controlled by IoT-enabled devices. Thieves have also used electronic means to circumvent non-Internet-connected hotel door locks.


title: Computer security

text: An attack that targets physical infrastructure and/or human lives is sometimes referred to as a cyber-kinetic attack. As IoT devices and appliances gain currency, cyber-kinetic attacks can become pervasive and significantly damaging.


title: Computer security

text: Medical devices have either been successfully attacked or had potentially deadly vulnerabilities demonstrated, including both in-hospital diagnostic equipment and implanted devices including pacemakers and insulin pumps. There are many reports of hospitals and hospital organizations getting hacked, including ransomware attacks, Windows XP exploits, viruses, and data breaches of sensitive data stored on hospital servers. On 28 December 2016 the US Food and Drug Administration released its recommendations for how medical device manufacturers should maintain the security of Internet-connected devices – but no structure for enforcement.


title: Computer security

text: In distributed generation systems, the risk of a cyber attack is real, according to "Daily Energy Insider". An attack could cause a loss of power in a large area for a long period of time, and such an attack could have just as severe consequences as a natural disaster. The District of Columbia is considering creating a Distributed Energy Resources (DER) Authority within the city, with the goal being for customers to have more insight into their own energy use and giving the local electric utility, Pepco, the chance to better estimate energy demand. The D.C. proposal, however, would "allow third-party vendors to create numerous points of energy distribution, which could potentially create more opportunities for cyber attackers to threaten the electric grid."


title: Computer security

text: Serious financial damage has been caused by security breaches, but because there is no standard model for estimating the cost of an incident, the only data available is that which is made public by the organizations involved. "Several computer security consulting firms produce estimates of total worldwide losses attributable to virus and worm attacks and to hostile digital acts in general. The 2003 loss estimates by these firms range from $13 billion (worms and viruses only) to $226 billion (for all forms of covert attacks). The reliability of these estimates is often challenged; the underlying methodology is basically anecdotal."


title: Computer security

text: However, reasonable estimates of the financial cost of security breaches can actually help organizations make rational investment decisions. According to the classic Gordon-Loeb Model analyzing the optimal investment level in information security, one can conclude that the amount a firm spends to protect information should generally be only a small fraction of the expected loss (i.e., the expected value of the loss resulting from a cyber/information security breach).


title: Computer security

text: As with physical security, the motivations for breaches of computer security vary between attackers. Some are thrill-seekers or vandals, some are activists, others are criminals looking for financial gain. State-sponsored attackers are now common and well resourced but started with amateurs such as Markus Hess who hacked for the KGB, as recounted by Clifford Stoll in "The Cuckoo's Egg".


title: Computer security

text: Additionally, recent attacker motivations can be traced back to extremist organizations seeking to gain political advantage or disrupt social agendas. The growth of the internet, mobile technologies, and inexpensive computing devices have led to a rise in capabilities but also to the risk to environments that are deemed as vital to operations. All critical targeted environments are susceptible to compromise and this has led to a series of proactive studies on how to migrate the risk by taking into consideration motivations by these types of actors. Several stark differences exist between the hacker motivation and that of nation state actors seeking to attack based on an ideological preference.


title: Computer security

text: A standard part of threat modeling for any particular system is to identify what might motivate an attack on that system, and who might be motivated to breach it. The level and detail of precautions will vary depending on the system to be secured. A home personal computer, bank, and classified military network face very different threats, even when the underlying technologies in use are similar.


title: Computer security

text: In computer security, a countermeasure is an action, device, procedure or technique that reduces a threat, a vulnerability, or an attack by eliminating or preventing it, by minimizing the harm it can cause, or by discovering and reporting it so that corrective action can be taken.


title: Computer security

text: Security by design, or alternately secure by design, means that the software has been designed from the ground up to be secure. In this case, security is considered as a main feature.


title: Computer security

text: The Open Security Architecture organization defines IT security architecture as "the design artifacts that describe how the security controls (security countermeasures) are positioned, and how they relate to the overall information technology architecture. These controls serve the purpose to maintain the system's quality attributes: confidentiality, integrity, availability, accountability and assurance services".


title: Computer security

text: Techopedia defines security architecture as "a unified security design that addresses the necessities and potential risks involved in a certain scenario or environment. It also specifies when and where to apply security controls. The design process is generally reproducible." The key attributes of security architecture are:


title: Computer security

text: Practicing security architecture provides the right foundation to systematically address business, IT and security concerns in an organization.


title: Computer security

text: A state of computer security is the conceptual ideal, attained by the use of the three processes: threat prevention, detection, and response. These processes are based on various policies and system components, which include the following:


title: Computer security

text: Today, computer security consists mainly of preventive measures, like firewalls or an exit procedure. A firewall can be defined as a way of filtering network data between a host or a network and another network, such as the Internet, and can be implemented as software running on the machine, hooking into the network stack (or, in the case of most UNIX-based operating systems such as Linux, built into the operating system kernel) to provide real-time filtering and blocking. Another implementation is a so-called "physical firewall", which consists of a separate machine filtering network traffic. Firewalls are common amongst machines that are permanently connected to the Internet.


title: Computer security

text: Some organizations are turning to big data platforms, such as Apache Hadoop, to extend data accessibility and machine learning to detect advanced persistent threats.


title: Computer security

text: However, relatively few organizations maintain computer systems with effective detection systems, and fewer still have organized response mechanisms in place. As a result, as Reuters points out: "Companies for the first time report they are losing more through electronic theft of data than physical stealing of assets". The primary obstacle to effective eradication of cybercrime could be traced to excessive reliance on firewalls and other automated detection systems. Yet it is basic evidence gathering by using packet capture appliances that puts criminals behind bars.


title: Computer security

text: In order to ensure adequate security, the confidentiality, integrity and availability of a network, better known as the CIA triad, must be protected and is considered the foundation to information security. To achieve those objectives, administrative, physical and technical security measures should be employed. The amount of security afforded to an asset can only be determined when its value is known.


title: Computer security

text: Vulnerability management is the cycle of identifying, remediating or mitigating vulnerabilities, especially in software and firmware. Vulnerability management is integral to computer security and network security.


title: Computer security

text: Vulnerabilities can be discovered with a vulnerability scanner, which analyzes a computer system in search of known vulnerabilities, such as open ports, insecure software configuration, and susceptibility to malware. In order for these tools to be effective, they must be kept up to date with every new update the vendor release. Typically, these updates will scan for the new vulnerabilities that were introduced recently.


title: Computer security

text: Beyond vulnerability scanning, many organizations contract outside security auditors to run regular penetration tests against their systems to identify vulnerabilities. In some sectors, this is a contractual requirement.


title: Computer security

text: While formal verification of the correctness of computer systems is possible, it is not yet common. Operating systems formally verified include seL4, and SYSGO's PikeOS – but these make up a very small percentage of the market.


title: Computer security

text: Two factor authentication is a method for mitigating unauthorized access to a system or sensitive information. It requires "something you know"; a password or PIN, and "something you have"; a card, dongle, cellphone, or another piece of hardware. This increases security as an unauthorized person needs both of these to gain access.


title: Computer security

text: Social engineering and direct computer access (physical) attacks can only be prevented by non-computer means, which can be difficult to enforce, relative to the sensitivity of the information. Training is often involved to help mitigate this risk, but even in highly disciplined environments (e.g. military organizations), social engineering attacks can still be difficult to foresee and prevent.


title: Computer security

text: Inoculation, derived from inoculation theory, seeks to prevent social engineering and other fraudulent tricks or traps by instilling a resistance to persuasion attempts through exposure to similar or related attempts.


title: Computer security

text: It is possible to reduce an attacker's chances by keeping systems up to date with security patches and updates, using a security scanner and/or hiring people with expertise in security, though none of these guarantee the prevention of an attack. The effects of data loss/damage can be reduced by careful backing up and insurance.


title: Computer security

text: While hardware may be a source of insecurity, such as with microchip vulnerabilities maliciously introduced during the manufacturing process, hardware-based or assisted computer security also offers an alternative to software-only computer security. Using devices and methods such as dongles, trusted platform modules, intrusion-aware cases, drive locks, disabling USB ports, and mobile-enabled access may be considered more secure due to the physical access (or sophisticated backdoor access) required in order to be compromised. Each of these is covered in more detail below.


title: Computer security

text: One use of the term "computer security" refers to technology that is used to implement secure operating systems. In the 1980s, the United States Department of Defense (DoD) used the "Orange Book" standards, but the current international standard ISO/IEC 15408, Common Criteria defines a number of progressively more stringent Evaluation Assurance Levels. Many common operating systems meet the EAL4 standard of being "Methodically Designed, Tested and Reviewed", but the formal verification required for the highest levels means that they are uncommon. An example of an EAL6 ("Semiformally Verified Design and Tested") system is INTEGRITY-178B, which is used in the Airbus A380


title: Computer security

text: In software engineering, secure coding aims to guard against the accidental introduction of security vulnerabilities. It is also possible to create software designed from the ground up to be secure. Such systems are "secure by design". Beyond this, formal verification aims to prove the correctness of the algorithms underlying a system;


title: Computer security

text: Within computer systems, two of the main security models capable of enforcing privilege separation are access control lists (ACLs) and role-based access control (RBAC).


title: Computer security

text: An access-control list (ACL), with respect to a computer file system, is a list of permissions associated with an object. An ACL specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects.


title: Computer security

text: Role-based access control is an approach to restricting system access to authorized users, used by the majority of enterprises with more than 500 employees, and can implement mandatory access control (MAC) or discretionary access control (DAC).


title: Computer security

text: A further approach, capability-based security has been mostly restricted to research operating systems. Capabilities can, however, also be implemented at the language level, leading to a style of programming that is essentially a refinement of standard object-oriented design. An open-source project in the area is the E language.


title: Computer security

text: The end-user is widely recognized as the weakest link in the security chain and it is estimated that more than 90% of security incidents and breaches involve some kind of human error. Among the most commonly recorded forms of errors and misjudgment are poor password management, sending emails containing sensitive data and attachments to the wrong recipient, the inability to recognize misleading URLs and to identify fake websites and dangerous email attachments. A common mistake that users make is saving their user id/password in their browsers to make it easier to log in to banking sites. This is a gift to attackers who have obtained access to a machine by some means. The risk may be mitigated by the use of two-factor authentication.


title: Computer security

text: As the human component of cyber risk is particularly relevant in determining the global cyber risk an organization is facing, security awareness training, at all levels, not only provides formal compliance with regulatory and industry mandates but is considered essential in reducing cyber risk and protecting individuals and companies from the great majority of cyber threats.


title: Computer security

text: The focus on the end-user represents a profound cultural change for many security practitioners, who have traditionally approached cybersecurity exclusively from a technical perspective, and moves along the lines suggested by major security centers to develop a culture of cyber awareness within the organization, recognizing that a security-aware user provides an important line of defense against cyber attacks.


title: Computer security

text: Related to end-user training, digital hygiene or cyber hygiene is a fundamental principle relating to information security and, as the analogy with personal hygiene shows, is the equivalent of establishing simple routine measures to minimize the risks from cyber threats. The assumption is that good cyber hygiene practices can give networked users another layer of protection, reducing the risk that one vulnerable node will be used to either mount attacks or compromise another node or network, especially from common cyberattacks. Cyber hygiene should also not be mistaken for proactive cyber defence, a military term.


title: Computer security

text: As opposed to a purely technology-based defense against threats, cyber hygiene mostly regards routine measures that are technically simple to implement and mostly dependent on discipline or education. It can be thought of as an abstract list of tips or measures that have been demonstrated as having a positive effect on personal and/or collective digital security. As such, these measures can be performed by laypeople, not just security experts.


title: Computer security

text: Cyber hygiene relates to personal hygiene as computer viruses relate to biological viruses (or pathogens). However, while the term "computer virus" was coined almost simultaneously with the creation of the first working computer viruses, the term "cyber hygiene" is a much later invention, perhaps as late as 2000 by Internet pioneer Vint Cerf. It has since been adopted by the Congress and Senate of the United States, the FBI, EU institutions and heads of state.


title: Computer security

text: Responding to attempted security breaches is often very difficult for a variety of reasons, including:


title: Computer security

text: Where an attack succeeds and a breach occurs, many jurisdictions now have in place mandatory security breach notification laws.


title: Computer security

text: Incident response is an organized approach to addressing and managing the aftermath of a computer security incident or compromise with the goal of preventing a breach or thwarting a cyberattack. An incident that is not identified and managed at the time of intrusion typically escalates to a more damaging event such as a data breach or system failure. The intended outcome of a computer security incident response plan is to contain the incident, limit damage and assist recovery to business as usual. Responding to compromises quickly can mitigate exploited vulnerabilities, restore services and processes and minimize losses.


title: Computer security

text: Incident response planning allows an organization to establish a series of best practices to stop an intrusion before it causes damage. Typical incident response plans contain a set of written instructions that outline the organization's response to a cyberattack. Without a documented plan in place, an organization may not successfully detect an intrusion or compromise and stakeholders may not understand their roles, processes and procedures during an escalation, slowing the organization's response and resolution.


title: Computer security

text: In 1988, 60,000 computers were connected to the Internet, and most were mainframes, minicomputers and professional workstations. On 2 November 1988, many started to slow down, because they were running a malicious code that demanded processor time and that spread itself to other computers – the first internet computer worm. The software was traced back to 23-year-old Cornell University graduate student Robert Tappan Morris who said "he wanted to count how many machines were connected to the Internet".


title: Computer security

text: In 1994, over a hundred intrusions were made by unidentified crackers into the Rome Laboratory, the US Air Force's main command and research facility. Using trojan horses, hackers were able to obtain unrestricted access to Rome's networking systems and remove traces of their activities. The intruders were able to obtain classified files, such as air tasking order systems data and furthermore able to penetrate connected networks of National Aeronautics and Space Administration's Goddard Space Flight Center, Wright-Patterson Air Force Base, some Defense contractors, and other private sector organizations, by posing as a trusted Rome center user.


title: Computer security

text: In early 2007, American apparel and home goods company TJX announced that it was the victim of an unauthorized computer systems intrusion and that the hackers had accessed a system that stored data on credit card, debit card, check, and merchandise return transactions.


title: Computer security

text: In 2010, the computer worm known as Stuxnet reportedly ruined almost one-fifth of Iran's nuclear centrifuges. It did so by disrupting industrial programmable logic controllers (PLCs) in a targeted attack. This is generally believed to have been launched by Israel and the United States to disrupt Iran's nuclear program – although neither has publicly admitted this.


title: Computer security

text: In early 2013, documents provided by Edward Snowden were published by "The Washington Post" and "The Guardian" exposing the massive scale of NSA global surveillance. There were also indications that the NSA may have inserted a backdoor in a NIST standard for encryption. This standard was later withdrawn due to widespread criticism. The NSA additionally were revealed to have tapped the links between Google's data centers.


title: Computer security

text: A Ukrainian hacker known as Rescator broke into Target Corporation computers in 2013, stealing roughly 40 million credit cards, and then Home Depot computers in 2014, stealing between 53 and 56 million credit card numbers. Warnings were delivered at both corporations, but ignored; physical security breaches using self checkout machines are believed to have played a large role. "The malware utilized is absolutely unsophisticated and uninteresting," says Jim Walter, director of threat intelligence operations at security technology company McAfee – meaning that the heists could have easily been stopped by existing antivirus software had administrators responded to the warnings. The size of the thefts has resulted in major attention from state and Federal United States authorities and the investigation is ongoing.


title: Computer security

text: In April 2015, the Office of Personnel Management discovered it had been hacked more than a year earlier in a data breach, resulting in the theft of approximately 21.5 million personnel records handled by the office. The Office of Personnel Management hack has been described by federal officials as among the largest breaches of government data in the history of the United States. Data targeted in the breach included personally identifiable information such as Social Security numbers, names, dates and places of birth, addresses, and fingerprints of current and former government employees as well as anyone who had undergone a government background check. It is believed the hack was perpetrated by Chinese hackers.


title: Computer security

text: In July 2015, a hacker group is known as The Impact Team successfully breached the extramarital relationship website Ashley Madison, created by Avid Life Media. The group claimed that they had taken not only company data but user data as well. After the breach, The Impact Team dumped emails from the company's CEO, to prove their point, and threatened to dump customer data unless the website was taken down permanently. When Avid Life Media did not take the site offline the group released two more compressed files, one 9.7GB and the second 20GB. After the second data dump, Avid Life Media CEO Noel Biderman resigned; but the website remained to function.


title: Computer security

text: In June 2021, the cyber attack took down the largest fuel pipeline in the U.S. and led to shortages across the East Coast.


title: Computer security

text: International legal issues of cyber attacks are complicated in nature. There is no global base of common rules to judge, and eventually punish, cybercrimes and cybercriminals - and where security firms or agencies do locate the cybercriminal behind the creation of a particular piece of malware or form of cyber attack, often the local authorities cannot take action due to lack of laws under which to prosecute. Proving attribution for cybercrimes and cyberattacks is also a major problem for all law enforcement agencies. "Computer viruses switch from one country to another, from one jurisdiction to another – moving around the world, using the fact that we don't have the capability to globally police operations like this. So the Internet is as if someone [had] given free plane tickets to all the online criminals of the world." The use of techniques such as dynamic DNS, fast flux and bullet proof servers add to the difficulty of investigation and enforcement.


title: Computer security

text: The role of the government is to make regulations to force companies and organizations to protect their systems, infrastructure and information from any cyberattacks, but also to protect its own national infrastructure such as the national power-grid.


title: Computer security

text: The government's regulatory role in cyberspace is complicated. For some, cyberspace was seen as a virtual space that was to remain free of government intervention, as can be seen in many of today's libertarian blockchain and bitcoin discussions.


title: Computer security

text: Many government officials and experts think that the government should do more and that there is a crucial need for improved regulation, mainly due to the failure of the private sector to solve efficiently the cybersecurity problem. R. Clarke said during a panel discussion at the RSA Security Conference in San Francisco, he believes that the "industry only responds when you threaten regulation. If the industry doesn't respond (to the threat), you have to follow through." On the other hand, executives from the private sector agree that improvements are necessary, but think that government intervention would affect their ability to innovate efficiently. Daniel R. McCarthy analyzed this public-private partnership in cybersecurity and reflected on the role of cybersecurity in the broader constitution of political order.


title: Computer security

text: On 22 May 2020, the UN Security Council held its second ever informal meeting on cybersecurity to focus on cyber challenges to international peace. According to UN Secretary-General António Guterres, new technologies are too often used to violate rights.


title: Computer security

text: On 14 April 2016, the European Parliament and Council of the European Union adopted The General Data Protection Regulation (GDPR) (EU) 2016/679. GDPR, which became enforceable beginning 25 May 2018, provides for data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). GDPR requires that business processes that handle personal data be built with data protection by design and by default. GDPR also requires that certain organizations appoint a Data Protection Officer (DPO).


title: Computer security

text: Since 2010, Canada has had a cybersecurity strategy. This functions as a counterpart document to the National Strategy and Action Plan for Critical Infrastructure. The strategy has three main pillars: securing government systems, securing vital private cyber systems, and helping Canadians to be secure online. There is also a Cyber Incident Management Framework to provide a coordinated response in the event of a cyber incident.


title: Computer security

text: The Canadian Cyber Incident Response Centre (CCIRC) is responsible for mitigating and responding to threats to Canada's critical infrastructure and cyber systems. It provides support to mitigate cyber threats, technical support to respond & recover from targeted cyber attacks, and provides online tools for members of Canada's critical infrastructure sectors. It posts regular cybersecurity bulletins & operates an online reporting tool where individuals and organizations can report a cyber incident.


title: Computer security

text: To inform the general public on how to protect themselves online, Public Safety Canada has partnered with STOP.THINK.CONNECT, a coalition of non-profit, private sector, and government organizations, and launched the Cyber Security Cooperation Program. They also run the GetCyberSafe portal for Canadian citizens, and Cyber Security Awareness Month during October.


title: Computer security

text: China's Central Leading Group for Internet Security and Informatization () was established on 27 February 2014. This Leading Small Group (LSG) of the Chinese Communist Party is headed by General Secretary Xi Jinping himself and is staffed with relevant Party and state decision-makers. The LSG was created to overcome the incoherent policies and overlapping responsibilities that characterized China's former cyberspace decision-making mechanisms. The LSG oversees policy-making in the economic, political, cultural, social and military fields as they relate to network security and IT strategy. This LSG also coordinates major policy initiatives in the international arena that promote norms and standards favored by the Chinese government and that emphasizes the principle of national sovereignty in cyberspace.


title: Computer security

text: Berlin starts National Cyber Defense Initiative: On 16 June 2011, the German Minister for Home Affairs, officially opened the new German NCAZ (National Center for Cyber Defense) Nationales Cyber-Abwehrzentrum located in Bonn. The NCAZ closely cooperates with BSI (Federal Office for Information Security) Bundesamt für Sicherheit in der Informationstechnik, BKA (Federal Police Organisation) Bundeskriminalamt (Deutschland), BND (Federal Intelligence Service) Bundesnachrichtendienst, MAD (Military Intelligence Service) Amt für den Militärischen Abschirmdienst and other national organizations in Germany taking care of national security aspects. According to the Minister, the primary task of the new organization founded on 23 February 2011, is to detect and prevent attacks against the national infrastructure and mentioned incidents like Stuxnet. Germany has also established the largest research institution for IT security in Europe, the Center for Research in Security and Privacy (CRISP) in Darmstadt.


title: Computer security

text: Some provisions for cybersecurity have been incorporated into rules framed under the Information Technology Act 2000.


title: Computer security

text: The National Cyber Security Policy 2013 is a policy framework by the Ministry of Electronics and Information Technology (MeitY) which aims to protect the public and private infrastructure from cyberattacks, and safeguard "information, such as personal information (of web users), financial and banking information and sovereign data". CERT- In is the nodal agency which monitors the cyber threats in the country. The post of National Cyber Security Coordinator has also been created in the Prime Minister's Office (PMO).


title: Computer security

text: The Indian Companies Act 2013 has also introduced cyber law and cybersecurity obligations on the part of Indian directors. Some provisions for cybersecurity have been incorporated into rules framed under the Information Technology Act 2000 Update in 2013.


title: Computer security

text: Following cyberattacks in the first half of 2013, when the government, news media, television stations, and bank websites were compromised, the national government committed to the training of 5,000 new cybersecurity experts by 2017. The South Korean government blamed its northern counterpart for these attacks, as well as incidents that occurred in 2009, 2011, and 2012, but Pyongyang denies the accusations.


title: Computer security

text: The 1986 , the Computer Fraud and Abuse Act is the key legislation. It prohibits unauthorized access or damage of "protected computers" as defined in . Although various other measures have been proposed – none has succeeded.


title: Computer security

text: In 2013, executive order "Improving Critical Infrastructure Cybersecurity" was signed, which prompted the creation of the NIST Cybersecurity Framework.


title: Computer security

text: In response to the Colonial Pipeline ransomware attack President Joe Biden signed Executive Order 14028 on May 12, 2021, to increase software security standards for sales to the government, tighten detection and security on existing systems, improve information sharing and training, establish a Cyber Safety Review Board, and improve incident response.


title: Computer security

text: The General Services Administration (GSA) has standardized the "penetration test" service as a pre-vetted support service, to rapidly address potential vulnerabilities, and stop adversaries before they impact US federal, state and local governments. These services are commonly referred to as Highly Adaptive Cybersecurity Services (HACS).


title: Computer security

text: The Department of Homeland Security has a dedicated division responsible for the response system, risk management program and requirements for cybersecurity in the United States called the National Cyber Security Division. The division is home to US-CERT operations and the National Cyber Alert System. The National Cybersecurity and Communications Integration Center brings together government organizations responsible for protecting computer networks and networked infrastructure.


title: Computer security

text: The third priority of the FBI is to: "Protect the United States against cyber-based attacks and high-technology crimes", and they, along with the National White Collar Crime Center (NW3C), and the Bureau of Justice Assistance (BJA) are part of the multi-agency task force, The Internet Crime Complaint Center, also known as IC3.


title: Computer security

text: In addition to its own specific duties, the FBI participates alongside non-profit organizations such as InfraGard.


title: Computer security

text: The Computer Crime and Intellectual Property Section (CCIPS) operates in the United States Department of Justice Criminal Division. The CCIPS is in charge of investigating computer crime and intellectual property crime and is specialized in the search and seizure of digital evidence in computers and networks. In 2017, CCIPS published A Framework for a Vulnerability Disclosure Program for Online Systems to help organizations "clearly describe authorized vulnerability disclosure and discovery conduct, thereby substantially reducing the likelihood that such described activities will result in a civil or criminal violation of law under the Computer Fraud and Abuse Act (18 U.S.C. § 1030)."


title: Computer security

text: The United States Cyber Command, also known as USCYBERCOM, "has the mission to direct, synchronize, and coordinate cyberspace planning and operations to defend and advance national interests in collaboration with domestic and international partners." It has no role in the protection of civilian networks.


title: Computer security

text: The U.S. Federal Communications Commission's role in cybersecurity is to strengthen the protection of critical communications infrastructure, to assist in maintaining the reliability of networks during disasters, to aid in swift recovery after, and to ensure that first responders have access to effective communications services.


title: Computer security

text: The Food and Drug Administration has issued guidance for medical devices, and the National Highway Traffic Safety Administration is concerned with automotive cybersecurity. After being criticized by the Government Accountability Office, and following successful attacks on airports and claimed attacks on airplanes, the Federal Aviation Administration has devoted funding to securing systems on board the planes of private manufacturers, and the Aircraft Communications Addressing and Reporting System. Concerns have also been raised about the future Next Generation Air Transportation System.


title: Computer security

text: "Computer emergency response team" is a name given to expert groups that handle computer security incidents. In the US, two distinct organizations exist, although they do work closely together.


title: Computer security

text: There is growing concern that cyberspace will become the next theater of warfare. As Mark Clayton from "The Christian Science Monitor" wrote in a 2015 article titled "The New Cyber Arms Race":


title: Computer security

text: This has led to new terms such as "cyberwarfare" and "cyberterrorism". The United States Cyber Command was created in 2009 and many other countries have similar forces.


title: Computer security

text: There are a few critical voices that question whether cybersecurity is as significant a threat as it is made out to be.


title: Computer security

text: Cybersecurity is a fast-growing field of IT concerned with reducing organizations' risk of hack or data breaches. According to research from the Enterprise Strategy Group, 46% of organizations say that they have a "problematic shortage" of cybersecurity skills in 2016, up from 28% in 2015. Commercial, government and non-governmental organizations all employ cybersecurity professionals. The fastest increases in demand for cybersecurity workers are in industries managing increasing volumes of consumer data such as finance, health care, and retail. However, the use of the term "cybersecurity" is more prevalent in government job descriptions.


title: Computer security

text: Student programs are also available for people interested in beginning a career in cybersecurity. Meanwhile, a flexible and effective option for information security professionals of all experience levels to keep studying is online security training, including webcasts. A wide range of certified courses are also available.


title: Computer security

text: In the United Kingdom, a nationwide set of cybersecurity forums, known as the U.K Cyber Security Forum, were established supported by the Government's cybersecurity strategy in order to encourage start-ups and innovation and to address the skills gap identified by the U.K Government.


title: Computer security

text: In Singapore, the Cyber Security Agency has issued a Singapore Operational Technology (OT) Cybersecurity Competency Framework (OTCCF). The framework defines emerging cybersecurity roles in Operational Technology. The OTCCF was endorsed by the Infocomm Media Development Authority (IMDA). It outlines the different OT cybersecurity job positions as well as the technical skills and core competencies necessary. It also depicts the many career paths available, including vertical and lateral advancement opportunities.


title: Vitamin

text: A vitamin is an organic molecule (or a set of molecules closely related chemically, i.e. vitamers) that is an essential micronutrient that an organism needs in small quantities for the proper functioning of its metabolism. Essential nutrients cannot be synthesized in the organism, either at all or not in sufficient quantities, and therefore must be obtained through the diet. Vitamin C can be synthesized by some species but not by others; it is not a vitamin in the first instance but is in the second. The term "vitamin" does not include the three other groups of essential nutrients: minerals, essential fatty acids, and essential amino acids. Most vitamins are not single molecules, but groups of related molecules called vitamers. For example, there are eight vitamers of vitamin E: four tocopherols and four tocotrienols. Some sources list fourteen vitamins, by including choline, but major health organizations list thirteen: vitamin A (as all-"trans"-retinol, all-"trans"-retinyl-esters, as well as all-"trans"-beta-carotene and other provitamin A carotenoids), vitamin B (thiamine), vitamin B (riboflavin), vitamin B (niacin), vitamin B (pantothenic acid), vitamin B (pyridoxine), vitamin B (biotin), vitamin B (folic acid or folate), vitamin B (cobalamins), vitamin C (ascorbic acid), vitamin D (calciferols), vitamin E (tocopherols and tocotrienols), and vitamin K (phylloquinone and menaquinones).


title: Vitamin

text: Vitamins have diverse biochemical functions. Vitamin A acts as a regulator of cell and tissue growth and differentiation. Vitamin D provides a hormone-like function, regulating mineral metabolism for bones and other organs. The B complex vitamins function as enzyme cofactors (coenzymes) or the precursors for them. Vitamins C and E function as antioxidants. Both deficient and excess intake of a vitamin can potentially cause clinically significant illness, although excess intake of water-soluble vitamins is less likely to do so.


title: Vitamin

text: All vitamins were discovered (identified) between 1913 and 1948. Historically, when intake of vitamins from diet was lacking, the results were vitamin deficiency diseases. Then, starting in 1935, commercially produced tablets of yeast-extract vitamin B complex and semi-synthetic vitamin C became available. This was followed in the 1950s by the mass production and marketing of vitamin supplements, including multivitamins, to prevent vitamin deficiencies in the general population. Governments have mandated the addition of some vitamins to staple foods such as flour or milk, referred to as food fortification, to prevent deficiencies. Recommendations for folic acid supplementation during pregnancy reduced risk of infant neural tube defects.


title: Vitamin

text: The value of eating certain foods to maintain health was recognized long before vitamins were identified. The ancient Egyptians knew that feeding liver to a person may help with night blindness, an illness now known to be caused by a vitamin A deficiency. The advancement of ocean voyages during the Age of Discovery resulted in prolonged periods without access to fresh fruits and vegetables, and made illnesses from vitamin deficiency common among ships' crews.


title: Vitamin

text: In 1747, the Scottish surgeon James Lind discovered that citrus foods helped prevent scurvy, a particularly deadly disease in which collagen is not properly formed, causing poor wound healing, bleeding of the gums, severe pain, and death. In 1753, Lind published his "Treatise on the Scurvy", which recommended using lemons and limes to avoid scurvy, which was adopted by the British Royal Navy. This led to the nickname "limey" for British sailors. Lind's discovery, however, was not widely accepted by individuals in the Royal Navy's Arctic expeditions in the 19th century, where it was widely believed that scurvy could be prevented by practicing good hygiene, regular exercise, and maintaining the morale of the crew while on board, rather than by a diet of fresh food. As a result, Arctic expeditions continued to be plagued by scurvy and other deficiency diseases. In the early 20th century, when Robert Falcon Scott made his two expeditions to the Antarctic, the prevailing medical theory at the time was that scurvy was caused by "tainted" canned food.


title: Vitamin

text: During the late 18th and early 19th centuries, the use of deprivation studies allowed scientists to isolate and identify a number of vitamins. Lipid from fish oil was used to cure rickets in rats, and the fat-soluble nutrient was called "antirachitic A". Thus, the first "vitamin" bioactivity ever isolated, which cured rickets, was initially called "vitamin A"; however, the bioactivity of this compound is now called vitamin D. In 1881, Russian medical doctor studied the effects of scurvy at the University of Tartu. He fed mice an artificial mixture of all the separate constituents of milk known at that time, namely the proteins, fats, carbohydrates, and salts. The mice that received only the individual constituents died, while the mice fed by milk itself developed normally. He made a conclusion that "a natural food such as milk must therefore contain, besides these known principal ingredients, small quantities of unknown substances essential to life." However, his conclusions were rejected by his advisor, Gustav von Bunge. A similar result by Cornelius Pekelharing appeared in a Dutch medical journal in 1905, but it was not widely reported.


title: Vitamin

text: In East Asia, where polished white rice was the common staple food of the middle class, beriberi resulting from lack of vitamin B was endemic. In 1884, Takaki Kanehiro, a British-trained medical doctor of the Imperial Japanese Navy, observed that beriberi was endemic among low-ranking crew who often ate nothing but rice, but not among officers who consumed a Western-style diet. With the support of the Japanese navy, he experimented using crews of two battleships; one crew was fed only white rice, while the other was fed a diet of meat, fish, barley, rice, and beans. The group that ate only white rice documented 161 crew members with beriberi and 25 deaths, while the latter group had only 14 cases of beriberi and no deaths. This convinced Takaki and the Japanese Navy that diet was the cause of beriberi, but they mistakenly believed that sufficient amounts of protein prevented it. That diseases could result from some dietary deficiencies was further investigated by Christiaan Eijkman, who in 1897 discovered that feeding unpolished rice instead of the polished variety to chickens helped to prevent a kind of polyneuritis that was the equivalent of beriberi. The following year, Frederick Hopkins postulated that some foods contained "accessory factors" — in addition to proteins, carbohydrates, fats "etc." — that are necessary for the functions of the human body.


title: Vitamin

text: In 1910, the first vitamin complex was isolated by Japanese scientist Umetaro Suzuki, who succeeded in extracting a water-soluble complex of micronutrients from rice bran and named it aberic acid (later "Orizanin"). He published this discovery in a Japanese scientific journal. When the article was translated into German, the translation failed to state that it was a newly discovered nutrient, a claim made in the original Japanese article, and hence his discovery failed to gain publicity. In 1912 Polish-born biochemist Casimir Funk, working in London, isolated the same complex of micronutrients and proposed the complex be named "vitamine". It was later to be known as vitamin B (niacin), though he described it as "anti-beri-beri-factor" (which would today be called thiamine or vitamin B). Funk proposed the hypothesis that other diseases, such as rickets, pellagra, coeliac disease, and scurvy could also be cured by vitamins. Max Nierenstein a friend and Reader of Biochemistry at Bristol University reportedly suggested the "vitamine" name (from "vital amine"). The name soon became synonymous with Hopkins' "accessory factors", and, by the time it was shown that not all vitamins are amines, the word was already ubiquitous. In 1920, Jack Cecil Drummond proposed that the final "e" be dropped to deemphasize the "amine" reference, hence "vitamin," after researchers began to suspect that not all "vitamines" (in particular, vitamin A) have an amine component.


title: Vitamin

text: The Nobel Prize for Chemistry for 1928 was awarded to Adolf Windaus "for his studies on the constitution of the sterols and their connection with vitamins", the first person to receive an award mentioning vitamins, even though it was not specifically about vitamin D.


title: Vitamin

text: The Nobel Prize in Physiology or Medicine for 1929 was awarded to Christiaan Eijkman and Frederick Gowland Hopkins for their contributions to the discovery of vitamins. Thirty-five years earlier, Eijkman had observed that chickens fed polished white rice developed neurological symptoms similar to those observed in military sailors and soldiers fed a rice-based diet, and that the symptoms were reversed when the chickens were switched to whole-grain rice. He called this "the anti-beriberi factor", which was later identified as vitamin B, thiamine.


title: Vitamin

text: In 1930, Paul Karrer elucidated the correct structure for beta-carotene, the main precursor of vitamin A, and identified other carotenoids. Karrer and Norman Haworth confirmed Albert Szent-Györgyi's discovery of ascorbic acid and made significant contributions to the chemistry of flavins, which led to the identification of lactoflavin. For their investigations on carotenoids, flavins and vitamins A and B, they both received the Nobel Prize in Chemistry in 1937.


title: Vitamin

text: In 1931, Albert Szent-Györgyi and a fellow researcher Joseph Svirbely suspected that "hexuronic acid" was actually vitamin C, and gave a sample to Charles Glen King, who proved its activity counter to scurvy in his long-established guinea pig scorbutic assay. In 1937, Szent-Györgyi was awarded the Nobel Prize in Physiology or Medicine for his discovery. In 1943, Edward Adelbert Doisy and Henrik Dam were awarded the Nobel Prize in Physiology or Medicine for their discovery of vitamin K and its chemical structure.


title: Vitamin

text: In 1938, Richard Kuhn was awarded the Nobel Prize in Chemistry for his work on carotenoids and vitamins, specifically B and B.


title: Vitamin

text: Five people have been awarded Nobel Prizes for direct and indirect studies of vitamin B: George Whipple, George Minot and William P. Murphy (1934), Alexander R. Todd (1957), and Dorothy Hodgkin (1964).


title: Vitamin

text: In 1967, George Wald, Ragnar Granit and Haldan Keffer Hartline were awarded the Nobel Prize in Physiology and Medicine "...for their discoveries concerning the primary physiological and chemical visual processes in the eye." Wald's contribution was discovering the role vitamin A had in the process.


title: Vitamin

text: Once discovered, vitamins were actively promoted in articles and advertisements in "McCall's", "Good Housekeeping", and other media outlets. Marketers enthusiastically promoted cod-liver oil, a source of vitamin D, as "bottled sunshine", and bananas as a "natural vitality food". They promoted foods such as yeast cakes, a source of B vitamins, on the basis of scientifically determined nutritional value, rather than taste or appearance. In 1942, when flour enrichment with nicotinic acid began, a headline in the popular press said "Tobacco in Your Bread." In response, the Council on Foods and Nutrition of the American Medical Association approved of the Food and Nutrition Board's new names "niacin" and "niacin amide" for use primarily by non-scientists. It was thought appropriate to choose a name to dissociate nicotinic acid from nicotine, to avoid the perception that vitamins or niacin-rich food contains nicotine, or that cigarettes contain vitamins. The resulting name "niacin" was derived from "cotinic id" + "vitam". Researchers also focused on the need to ensure adequate nutrition, especially to compensate for what was lost in the manufacture of processed foods.


title: Vitamin

text: Robert W. Yoder is credited with first using the term "vitamania", in 1942, to describe the appeal of relying on nutritional supplements rather than on obtaining vitamins from a varied diet of foods. The continuing preoccupation with a healthy lifestyle led to an obsessive consumption of vitamins and multi-vitamins, the beneficial effects of which are questionable. As one example, in the 1950s, the Wonder Bread company sponsored the Howdy Doody television show, with host Buffalo Bob Smith telling the audience, "Wonder Bread builds strong bodies 8 ways", referring to the number of added nutrients.


title: Vitamin

text: The term "vitamin" was derived from "vitamine", a compound word coined in 1912 by the biochemist Casimir Funk while working at the Lister Institute of Preventive Medicine. Funk created the name from "vital" and "amine", because it appeared that these organic micronutrient food factors that prevent beriberi and perhaps other similar dietary-deficiency diseases were required for life, hence "vital", and were chemical amines, hence "amine". This was true of thiamine, but after it was found that vitamin C and other such micronutrients were not amines, the word was shortened to "vitamin" in English.


title: Vitamin

text: Vitamins are classified as either water-soluble or fat-soluble. In humans there are 13 vitamins: 4 fat-soluble (A, D, E, and K) and 9 water-soluble (8 B vitamins and vitamin C). Water-soluble vitamins dissolve easily in water and, in general, are readily excreted from the body, to the degree that urinary output is a strong predictor of vitamin consumption. Because they are not as readily stored, more consistent intake is important. Fat-soluble vitamins are absorbed through the intestinal tract with the help of lipids (fats). Vitamins A and D can accumulate in the body, which can result in dangerous hypervitaminosis. Fat-soluble vitamin deficiency due to malabsorption is of particular significance in cystic fibrosis.


title: Vitamin

text: Anti-vitamins are chemical compounds that inhibit the absorption or actions of vitamins. For example, avidin is a protein in raw egg whites that inhibits the absorption of biotin; it is deactivated by cooking. Pyrithiamine, a synthetic compound, has a molecular structure similar to thiamine, vitamin B, and inhibits the enzymes that use thiamine.


title: Vitamin

text: Vitamins are essential for the normal growth and development of a multicellular organism. Using the genetic blueprint inherited from its parents, a fetus develops from the nutrients it absorbs. It requires certain vitamins and minerals to be present at certain times. These nutrients facilitate the chemical reactions that produce among other things, skin, bone, and muscle. If there is serious deficiency in one or more of these nutrients, a child may develop a deficiency disease. Even minor deficiencies may cause permanent damage.


title: Vitamin

text: Once growth and development are completed, vitamins remain essential nutrients for the healthy maintenance of the cells, tissues, and organs that make up a multicellular organism; they also enable a multicellular life form to efficiently use chemical energy provided by food it eats, and to help process the proteins, carbohydrates, and fats required for cellular respiration.


title: Vitamin

text: For the most part, vitamins are obtained from the diet, but some are acquired by other means: for example, microorganisms in the gut flora produce vitamin K and biotin; and one form of vitamin D is synthesized in skin cells when they are exposed to a certain wavelength of ultraviolet light present in sunlight. Humans can produce some vitamins from precursors they consume: for example, vitamin A is synthesized from beta carotene; and niacin is synthesized from the amino acid tryptophan. Vitamin C can be synthesized by some species but not by others. Vitamin B is the only vitamin or nutrient not available from plant sources. The Food Fortification Initiative lists countries which have mandatory fortification programs for vitamins folic acid, niacin, vitamin A and vitamins B, B and B.


title: Vitamin

text: The body's stores for different vitamins vary widely; vitamins A, D, and B are stored in significant amounts, mainly in the liver, and an adult's diet may be deficient in vitamins A and D for many months and B in some cases for years, before developing a deficiency condition. However, vitamin B (niacin and niacinamide) is not stored in significant amounts, so stores may last only a couple of weeks. For vitamin C, the first symptoms of scurvy in experimental studies of complete vitamin C deprivation in humans have varied widely, from a month to more than six months, depending on previous dietary history that determined body stores.


title: Vitamin

text: Deficiencies of vitamins are classified as either primary or secondary. A primary deficiency occurs when an organism does not get enough of the vitamin in its food. A secondary deficiency may be due to an underlying disorder that prevents or limits the absorption or use of the vitamin, due to a "lifestyle factor", such as smoking, excessive alcohol consumption, or the use of medications that interfere with the absorption or use of the vitamin. People who eat a varied diet are unlikely to develop a severe primary vitamin deficiency, but may be consuming less than the recommended amounts; a national food and supplement survey conducted in the US over 2003-2006 reported that over 90% of individuals who did not consume vitamin supplements were found to have inadequate levels of some of the essential vitamins, notably vitamins D and E.


title: Vitamin

text: Well-researched human vitamin deficiencies involve thiamine (beriberi), niacin (pellagra), vitamin C (scurvy), folate (neural tube defects) and vitamin D (rickets). In much of the developed world these deficiencies are rare due to an adequate supply of food and the addition of vitamins to common foods. In addition to these classical vitamin deficiency diseases, some evidence has also suggested links between vitamin deficiency and a number of different disorders.


title: Vitamin

text: Some vitamins have documented acute or chronic toxicity at larger intakes, which is referred to as hypertoxicity. The European Union and the governments of several countries have established Tolerable upper intake levels (ULs) for those vitamins which have documented toxicity (see table). The likelihood of consuming too much of any vitamin from food is remote, but excessive intake (vitamin poisoning) from dietary supplements does occur. In 2016, overdose exposure to all formulations of vitamins and multi-vitamin/mineral formulations was reported by 63,931 individuals to the American Association of Poison Control Centers with 72% of these exposures in children under the age of five. In the US, analysis of a national diet and supplement survey reported that about 7% of adult supplement users exceeded the UL for folate and 5% of those older than age 50 years exceeded the UL for vitamin A.


title: Vitamin

text: The USDA has conducted extensive studies on the percentage losses of various nutrients from food types and cooking methods. Some vitamins may become more "bio-available" – that is, usable by the body – when foods are cooked. The table below shows whether various vitamins are susceptible to loss from heat—such as heat from boiling, steaming, frying, etc. The effect of cutting vegetables can be seen from exposure to air and light. Water-soluble vitamins such as B and C dissolve into the water when a vegetable is boiled, and are then lost when the water is discarded.


title: Vitamin

text: In setting human nutrient guidelines, government organizations do not necessarily agree on amounts needed to avoid deficiency or maximum amounts to avoid the risk of toxicity. For example, for vitamin C, recommended intakes range from 40 mg/day in India to 155 mg/day for the European Union. The table below shows U.S. Estimated Average Requirements (EARs) and Recommended Dietary Allowances (RDAs) for vitamins, PRIs for the European Union (same concept as RDAs), followed by what three government organizations deem to be the safe upper intake. RDAs are set higher than EARs to cover people with higher than average needs. Adequate Intakes (AIs) are set when there is not sufficient information to establish EARs and RDAs. Governments are slow to revise information of this nature. For the U.S. values, with the exception of calcium and vitamin D, all of the data date to 1997–2004.


title: Vitamin

text: RDA US Recommended Dietary Allowances; higher for adults than for children, and may be even higher for women who are pregnant or lactating.


title: Vitamin

text: AI US and EFSA Adequate Intake; AIs established when there is not sufficient information to set EARs and RDAs.


title: Vitamin

text: PRI Population Reference Intake is European Union equivalent of RDA; higher for adults than for children, and may be even higher for women who are pregnant or lactating. For Thiamin and Niacin the PRIs are expressed as amounts per MJ of calories consumed. MJ = megajoule = 239 food calories.


title: Vitamin

text: In those who are otherwise healthy, there is little evidence that supplements have any benefits with respect to cancer or heart disease. Vitamin A and E supplements not only provide no health benefits for generally healthy individuals, but they may increase mortality, though the two large studies that support this conclusion included smokers for whom it was already known that beta-carotene supplements can be harmful. A 2018 meta-analysis found no evidence that intake of vitamin D or calcium for community-dwelling elderly people reduced bone fractures.


title: Vitamin

text: Europe has regulations that define limits of vitamin (and mineral) dosages for their safe use as dietary supplements. Most vitamins that are sold as dietary supplements are not supposed to exceed a maximum daily dosage referred to as the tolerable upper intake level (UL or Upper Limit). Vitamin products above these regulatory limits are not considered supplements and should be registered as prescription or non-prescription (over-the-counter drugs) due to their potential side effects. The European Union, United States and Japan establish ULs.


title: Vitamin

text: Dietary supplements often contain vitamins, but may also include other ingredients, such as minerals, herbs, and botanicals. Scientific evidence supports the benefits of dietary supplements for persons with certain health conditions. In some cases, vitamin supplements may have unwanted effects, especially if taken before surgery, with other dietary supplements or medicines, or if the person taking them has certain health conditions. They may also contain levels of vitamins many times higher, and in different forms, than one may ingest through food.


title: Vitamin

text: Most countries place dietary supplements in a special category under the general umbrella of "foods", not drugs. As a result, the manufacturer, and not the government, has the responsibility of ensuring that its dietary supplement products are safe before they are marketed. Regulation of supplements varies widely by country. In the United States, a dietary supplement is defined under the Dietary Supplement Health and Education Act of 1994. There is no FDA approval process for dietary supplements, and no requirement that manufacturers prove the safety or efficacy of supplements introduced before 1994. The Food and Drug Administration must rely on its Adverse Event Reporting System to monitor adverse events that occur with supplements.


title: Vitamin

text: In 2007, the US Code of Federal Regulations (CFR) Title 21, part III took effect, regulating Good Manufacturing Practices (GMPs) in the manufacturing, packaging, labeling, or holding operations for dietary supplements. Even though product registration is not required, these regulations mandate production and quality control standards (including testing for identity, purity and adulterations) for dietary supplements. In the European Union, the Food Supplements Directive requires that only those supplements that have been proven safe can be sold without a prescription. For most vitamins, pharmacopoeial standards have been established. In the United States, the United States Pharmacopeia (USP) sets standards for the most commonly used vitamins and preparations thereof. Likewise, monographs of the European Pharmacopoeia (Ph.Eur.) regulate aspects of identity and purity for vitamins on the European market.


title: Vitamin

text: The reason that the set of vitamins skips directly from E to K is that the vitamins corresponding to letters F–J were either reclassified over time, discarded as false leads, or renamed because of their relationship to vitamin B, which became a complex of vitamins.


title: Vitamin

text: The Danish-speaking scientists who isolated and described vitamin K (in addition to naming it as such) did so because the vitamin is intimately involved in the coagulation of blood following wounding (from the Danish word "Koagulation"). At the time, most (but not all) of the letters from F through to J were already designated, so the use of the letter K was considered quite reasonable. The table "Nomenclature of reclassified vitamins" lists chemicals that had previously been classified as vitamins, as well as the earlier names of vitamins that later became part of the B-complex.


title: Vitamin

text: The missing B vitamins were reclassified or determined not to be vitamins. For example, B is folic acid and five of the folates are in the range B through B. Others, such as PABA (formerly B), are biologically inactive, toxic, or with unclassifiable effects in humans, or not generally recognised as vitamins by science, such as the highest-numbered, which some naturopath practitioners call B and B. There are also nine lettered B complex vitamins (e.g., B). There are other D vitamins now recognised as other substances, which some sources of the same type number up to D. The controversial cancer treatment laetrile was at one point lettered as vitamin B. There appears to be no consensus on any vitamins Q, R, T, V, W, X, Y or Z, nor are there substances officially designated as vitamins N or I, although the latter may have been another form of one of the other vitamins or a known and named nutrient of another type.


title: Dark fantasy

text: Dark fantasy is a subgenre of fantasy literary, artistic, and cinematic works that incorporate disturbing and frightening themes of fantasy. It often combines fantasy with elements of horror or has a gloomy dark tone or a sense of horror and dread.


title: Dark fantasy

text: A strict definition for dark fantasy is difficult to pin down. Gertrude Barrows Bennett has been called "the woman who invented dark fantasy". Both Charles L. Grant and Karl Edward Wagner are credited with having coined the term "dark fantasy"—although both authors were describing different styles of fiction. Brian Stableford argues "dark fantasy" can be usefully defined as subgenre of stories that attempt to "incorporate elements of horror fiction" into the standard formulae of fantasy stories. Stableford also suggests that supernatural horror set primarily in the real world is a form of "contemporary fantasy", whereas supernatural horror set partly or wholly in "secondary worlds" should be described as "dark fantasy".


title: Dark fantasy

text: Additionally, other authors, critics, and publishers have adopted dark fantasy to describe various other works. However, these stories rarely share universal similarities beyond supernatural occurrences and a dark, often brooding, tone. As a result, dark fantasy cannot be solidly connected to a defining set of tropes. The term itself may refer collectively to tales that are either horror-based or fantasy-based.


title: Dark fantasy

text: Some writers also use "dark fantasy" (or "Gothic fantasy") as an alternative description to "horror", because they feel the latter term is too lurid or vivid.


title: Dark fantasy

text: Charles L. Grant is often cited as having coined the term "dark fantasy". Grant defined his brand of dark fantasy as "a type of horror story in which humanity is threatened by forces beyond human understanding". He often used dark fantasy as an alternative to horror, as horror was increasingly associated with more visceral works.


title: Dark fantasy

text: Dark fantasy is sometimes also used to describe stories told from a monster's point of view, or that present a more sympathetic view of supernatural beings usually associated with horror. Anne Rice's "The Vampire Chronicles", Chelsea Quinn Yarbro's "Saint-Germain", and Neil Gaiman's "The Sandman" are early examples of this style of dark fantasy. This is in contrast to the traditional horror model, which focuses more on the victims and survivors.


title: Dark fantasy

text: In a more general sense, dark fantasy is occasionally used as a synonym for supernatural horror, to distinguish horror stories that contain elements of the supernatural from those that do not. For example, a story about a werewolf or vampire could be described as dark fantasy, while a story about a serial killer would simply be horror.


title: Dark fantasy

text: Stableford suggests that the type of horror conveyed by fantasy stories such as William Beckford's "Vathek" and Edgar Allan Poe's "The Masque of the Red Death" "is more aesthetic than visceral or existential", and that such stories should be considered "dark fantasies" rather than the "supernaturalized thrillers" of conventional horror fiction.


title: Dark fantasy

text: Karl Edward Wagner is often credited for creating the term "dark fantasy" when used in a more fantasy-based context. Wagner used it to describe his fiction about the Gothic warrior Kane. Since then, "dark fantasy" has sometimes been applied to sword and sorcery and high fantasy fiction that features anti-heroic or morally ambiguous protagonists. Another good example under this definition of dark fantasy is Michael Moorcock's saga of the albino swordsman Elric.


title: Dark fantasy

text: The fantasy work of H. P. Lovecraft, Clark Ashton Smith and their emulators have been specified as "dark fantasy", since the imaginary worlds they depicted contain many horror elements.


title: Dark fantasy

text: Dark fantasy is occasionally used to describe fantasy works by authors whom the public primarily associates with the horror genre. Examples of these are Stephen King's "The Dark Tower" series, Peter Straub's "Shadowland" and Clive Barker's "Weaveworld". Alternatively, dark fantasy is sometimes used for "darker" fiction written by authors best known for other styles of fantasy; Raymond Feist's "Faerie Tale" and Charles de Lint's novels written as Samuel M. Key would fit here.


title: Dark fantasy

text: "Berserk", a manga and anime franchise by Kentaro Miura that debuted in 1989, is frequently noted as an example of the genre due to its depictions of extreme violence, moral ambiguity, apocalyptic storylines and anti-hero protagonists.


title: Dark fantasy

text: "Attack on Titan" is a dark fantasy for its intense violence and the dystopian world it takes place in.


title: Dark fantasy

text: Ridley Scott's film "Legend" (1985) has been described as a "dark fairy tale" fantasy film. Guillermo del Toro's fantasy film "Pan's Labyrinth" (2006) has been described as a "sort of a dark spin on "Alice in Wonderland"".


title: Zoroaster

text: Zoroaster, also known as Zarathustra, is regarded as the spiritual founder of Zoroastrianism. He is said to have been an Iranian prophet who founded a religious movement that challenged the existing traditions of ancient Iranian religion, and inaugurated a movement that eventually became a staple religion in ancient Iran. He was a native speaker of Old Avestan and lived in the eastern part of the Iranian plateau, but his exact birthplace is uncertain.


title: Zoroaster

text: There is no scholarly consensus on when he lived. Some scholars, using linguistic and socio-cultural evidence, suggest a dating to somewhere in the second millennium BC. Other scholars date him to the 7th and 6th centuries BC as a near-contemporary of Cyrus the Great and Darius the Great. Zoroastrianism eventually became the official state religion of ancient Iran—particularly during the era of the Achaemenid Empire—and its distant subdivisions from around the 6th century BC until the 7th century AD, when the religion itself began to decline following the Arab-Muslim conquest of Iran. Zoroaster is credited with authorship of the "Gathas" as well as the "Yasna Haptanghaiti", a series of hymns composed in his native Avestan dialect that comprise the core of Zoroastrian thinking. Little is known about Zoroaster; most of his life is known only from these scant texts. By any modern standard of historiography, no evidence can place him into a fixed period and the historicization surrounding him may be a part of a trend from before the 10th century AD that historicizes legends and myths.


title: Zoroaster

text: Zoroaster's name in his native language, Avestan, was probably "Zaraθuštra". His English name, "Zoroaster", derives from a later (5th century BC) Greek transcription, "Zōroastrēs" (), as used in Xanthus's "Lydiaca" (Fragment 32) and in Plato's "First Alcibiades" (122a1). This form appears subsequently in the Latin "" and, in later Greek orthographies, as Ζωροάστρις "Zōroastris". The Greek form of the name appears to be based on a phonetic transliteration or semantic substitution of Avestan "zaraθ-" with the Greek ζωρός "zōros" (literally "undiluted") and the BMAC substrate "-uštra" with ἄστρον "astron" ("star").


title: Zoroaster

text: In Avestan, "Zaraθuštra" is generally accepted to derive from an Old Iranian "*Zaratuštra-"; The element half of the name ("-uštra-") is thought to be the Indo-Iranian root for "camel", with the entire name meaning "he who can manage camels". Reconstructions from later Iranian languages—particularly from the Middle Persian (300 BC) "Zardusht", which is the form that the name took in the 9th- to 12th-century Zoroastrian texts—suggest that "*Zaratuštra-" might be a zero-grade form of "*Zarantuštra-". Subject then to whether "Zaraθuštra" derives from "*Zarantuštra-" or from "*Zaratuštra-", several interpretations have been proposed.


title: Zoroaster

text: If "Zarantuštra" is the original form, it may mean "with old/aging camels", related to Avestic "zarant-" ("cf." Pashto "zōṛ" and Ossetian "zœrond", "old"; Middle Persian "zāl", "old"):


title: Zoroaster

text: The interpretation of the "-θ-" () in Avestan "zaraθuštra" was for a time itself subjected to heated debate because the "-θ-" is an irregular development: As a rule, "*zarat-" (a first element that ends in a dental consonant) should have Avestan "zarat-" or "zarat̰-" as a development from it. Why this is not so for "zaraθuštra" has not yet been determined. Notwithstanding the phonetic irregularity, that Avestan "zaraθuštra" with its "-θ-" was linguistically an actual form is shown by later attestations reflecting the same basis. All present-day, Iranian-language variants of his name derive from the Middle Iranian variants of "Zarθošt", which, in turn, all reflect Avestan's fricative "-θ-".


title: Zoroaster

text: In Middle Persian, the name is 𐭦𐭫𐭲𐭥𐭱𐭲 "Zardu(x)št", in Parthian "Zarhušt", in Manichaean Middle Persian "Zrdrwšt", in Early New Persian "Zardušt", and in modern (New Persian), the name is زرتشت "Zartosht".


title: Zoroaster

text: The name is attested in Classical Armenian sources as "Zradašt" (often with the variant "Zradešt"). The most important of these testimonies were provided by the Armenian authors Eznik of Kolb, Elishe, and Movses Khorenatsi. The spelling Zradašt was formed through an older form which started with "*zur-", a fact which the German Iranologist Friedrich Carl Andreas (1846–1930) used as evidence for a Middle Persian spoken form "*Zur(a)dušt". Based on this assumption, Andreas even went so far to form conclusions from this also for the Avestan form of the name. However, the modern Iranologist Rüdiger Schmitt rejects Andreas's assumption, and states that the older form which started with "*zur-" was just influenced by Armenian "zur" ("wrong, unjust, idle"), which therefore means that "the name must have been reinterpreted in an anti-Zoroastrian sense by the Armenian Christians". Furthermore, Schmitt adds: "it cannot be excluded, that the (Parthian or) Middle Persian form, which the Armenians took over ("Zaradušt" or the like), was merely metathesized to pre-Arm. "*Zuradašt"".


title: Zoroaster

text: There is no consensus on the dating of Zoroaster; the Avesta gives no direct information about it, while historical sources are conflicting. Some scholars base their date reconstruction on the Proto-Indo-Iranian language and Proto-Indo-Iranian religion, and thus his origin is considered to have been somewhere in northeastern Iran and sometime between 1500 and 500 BC.


title: Zoroaster

text: Some scholars such as Mary Boyce (who dated Zoroaster to somewhere between 1700 and 1000 BC) used linguistic and socio-cultural evidence to place Zoroaster between 1500 and 1000 BC (or 1200 and 900 BC). The basis of this theory is primarily proposed on linguistic similarities between the Old Avestan language of the Zoroastrian Gathas and the Sanskrit of the Rigveda (c. 1700–1100 BC), a collection of early Vedic hymns. Both texts are considered to have a common archaic Indo-Iranian origin. The Gathas portray an ancient Stone-Bronze Age bipartite society of warrior-herdsmen and priests (compared to Bronze tripartite society; some conjecture that it depicts the Yaz culture), and that it is thus implausible that the Gathas and Rigveda could have been composed more than a few centuries apart. These scholars suggest that Zoroaster lived in an isolated tribe or composed the Gathas before the 1200–1000 BC migration by the Iranians from the steppe to the Iranian Plateau. The shortfall of the argument is the vague comparison, and the archaic language of Gathas does not necessarily indicate time difference.


title: Zoroaster

text: Other scholars propose a period between 7th and 6th century BC, for example, c. 650–600 BC or 559–522 BC. The latest possible date is the mid 6th century BC, at the time of Achaemenid Empire's Darius I, or his predecessor Cyrus the Great. This date gains credence mainly from attempts to connect figures in Zoroastrian texts to historical personages; thus some have postulated that the mythical Vishtaspa who appears in an account of Zoroaster's life was Darius I's father, also named Vishtaspa (or Hystaspes in Greek). However, if this were true, it seems unlikely that the Avesta would not mention that Vishtaspa's son became the ruler of the Persian Empire, or that this key fact about Darius's father would not be mentioned in the Behistun Inscription. It is also possible that Darius I's father was named in honor of the Zoroastrian patron, indicating possible Zoroastrian faith by Arsames.


title: Zoroaster

text: Classical scholarship in the 6th to 4th century BC believed he existed six thousand years before Xerxes I's invasion of Greece in 480 BC (Xanthus, Eudoxus, Aristotle, Hermippus), which is a possible misunderstanding of the Zoroastrian four cycles of 3000 years i.e. 12,000 years. This belief is recorded by Diogenes Laërtius, and variant readings could place it six hundred years before Xerxes I, somewhere before 1000 BC. However, Diogenes also mentions Hermodorus's belief that Zoroaster lived five thousand years before the Trojan War, which would mean he lived around 6200 BC. The 10th-century Suda provides a date of "500 years before Plato" in the late 10th century BC. Pliny the Elder cited Eudoxus who also placed his death six thousand years before Plato, c. 6300 BC. Other pseudo-historical constructions are those of Aristoxenus who recorded Zaratas the Chaldeaean to have taught Pythagoras in Babylon, or lived at the time of mythological Ninus and Semiramis. According to Pliny the Elder, there were two Zoroasters. The first lived thousands of years ago, while the second accompanied Xerxes I in the invasion of Greece in 480 BC. Some scholars propose that the chronological calculation for Zoroaster was developed by Persian magi in the 4th century BC, and as the early Greeks learned about him from the Achaemenids, this indicates they did not regard him as a contemporary of Cyrus the Great, but as a remote figure.


title: Zoroaster

text: Some later pseudo-historical and Zoroastrian sources (the "Bundahishn", which references a date "258 years before Alexander") place Zoroaster in the 6th century BC, which coincided with the accounts by Ammianus Marcellinus from the 4th century AD. The traditional Zoroastrian date originates in the period immediately following Alexander the Great's conquest of the Achaemenid Empire in 330 BC. The Seleucid rulers who gained power following Alexander's death instituted an "Age of Alexander" as the new calendrical epoch. This did not appeal to the Zoroastrian priesthood who then attempted to establish an "Age of Zoroaster". To do so, they needed to establish when Zoroaster had lived, which they accomplished by (erroneous, according to Mary Boyce some even identified Cyrus with Vishtaspa) counting back the length of successive generations, until they concluded that Zoroaster must have lived "258 years before Alexander". This estimate then re-appeared in the 9th- to 12th-century Arabic and Pahlavi texts of Zoroastrian tradition, like the 10th century Al-Masudi who cited a prophecy from a lost Avestan book in which Zoroaster foretold the Empire's destruction in three hundred years, but the religion would last for a thousand years.


title: Zoroaster

text: The birthplace of Zoroaster is also unknown, and the language of the Gathas is not similar to the proposed north-western and north-eastern regional dialects of Persia. It is also suggested that he was born in one of the two areas and later lived in the other area.


title: Zoroaster

text: "Yasna" 9 and 17 cite the Ditya River in Airyanem Vaējah (Middle Persian "Ērān Wēj") as Zoroaster's home and the scene of his first appearance. The Avesta (both Old and Younger portions) does not mention the Achaemenids or of any West Iranian tribes such as the Medes, Persians, or even Parthians. The "Farvardin Yasht" refers to some Iranian peoples that are unknown in the Greek and Achaemenid sources about the 6th and 5th century BC Eastern Iran. The "Vendidad" contain seventeen regional names, most of which are located in north-eastern and eastern Iran.


title: Zoroaster

text: However, in "Yasna" 59.18, the "zaraθuštrotema", or supreme head of the Zoroastrian priesthood, is said to reside in 'Ragha' (Badakhshan). In the 9th- to 12th-century Middle Persian texts of Zoroastrian tradition, this 'Ragha' and with many other places appear as locations in Western Iran. While the land of Media does not figure at all in the Avesta (the westernmost location noted in scripture is Arachosia), the "Būndahišn", or "Primordial Creation," (20.32 and 24.15) puts Ragha in Media (medieval Rai). However, in Avestan, Ragha is simply a toponym meaning "plain, hillside."


title: Zoroaster

text: Apart from these indications in Middle Persian sources that are open to interpretations, there are a number of other sources. The Greek and Latin sources are divided on the birthplace of Zarathustra. There are many Greek accounts of Zarathustra, referred usually as Persian or Perso-Median Zoroaster; Ctesias located him in Bactria, Diodorus Siculus placed him among Ariaspai (in Sistan), Cephalion and Justin suggest east of greater Iran whereas Pliny and Origen suggest west of Iran as his birthplace. Moreover, they have the suggestion that there has been more than one Zoroaster.


title: Zoroaster

text: On the other hand, in post-Islamic sources Shahrastani (1086–1153) an Iranian writer originally from Shahristān, present-day Turkmenistan, proposed that Zoroaster's father was from Atropatene (also in Medea) and his mother was from Rey. Coming from a reputed scholar of religions, this was a serious blow for the various regions who all claimed that Zoroaster originated from "their" homelands, some of which then decided that Zoroaster must then have then been buried in their regions or composed his Gathas there or preached there. Also Arabic sources of the same period and the same region of historical Persia consider Azerbaijan as the birthplace of Zarathustra.


title: Zoroaster

text: By the late 20th century, most scholars had settled on an origin in eastern Greater Iran. Gnoli proposed Sistan, Baluchistan (though in a much wider scope than the present-day province) as the homeland of Zoroastrianism; Frye voted for Bactria and Chorasmia; Khlopin suggests the Tedzen Delta in present-day Turkmenistan.


title: Zoroaster

text: Sarianidi considered the Bactria–Margiana Archaeological Complex region as "the native land of the Zoroastrians and, probably, of Zoroaster himself." Boyce includes the steppes to the west from the Volga. The medieval "from Media" hypothesis is no longer taken seriously, and Zaehner has even suggested that this was a Magi-mediated issue to garner legitimacy, but this has been likewise rejected by Gershevitch and others.


title: Zoroaster

text: The 2005 "Encyclopedia Iranica" article on the history of Zoroastrianism summarizes the issue with "while there is general agreement that he did not live in western Iran, attempts to locate him in specific regions of eastern Iran, including Central Asia, remain tentative".


title: Zoroaster

text: Zoroaster is recorded as the son of Pourušaspa of the Spitamans or Spitamids (Avestan "spit" mean "brilliant" or "white"; some argue that Spitama was a remote progenitor) family, and Dugdōw, while his great-grandfather was Haēčataspa. All the names appear appropriate to the nomadic tradition. His father's name means "possessing gray horses" (with the word "aspa" meaning horse), while his mother's means "milkmaid". According to the tradition, he had four brothers, two older and two younger, whose names are given in much later Pahlavi work.


title: Zoroaster

text: The training for priesthood probably started very early around seven years of age. He became a priest probably around the age of fifteen, and according to Gathas, he gained knowledge from other teachers and personal experience from traveling when he left his parents at age twenty. By the age of thirty, he experienced a revelation during a spring festival; on the river bank he saw a shining Being, who revealed himself as Vohu Manah (Good Purpose) and taught him about Ahura Mazda (Wise Lord) and five other radiant figures. Zoroaster soon became aware of the existence of two primal Spirits, the second being Angra Mainyu (Destructive Spirit), with opposing concepts of Asha (order) and Druj (deception). Thus he decided to spend his life teaching people to seek Asha. He received further revelations and saw a vision of the seven Amesha Spenta, and his teachings were collected in the Gathas and the Avesta.


title: Zoroaster

text: Eventually, at the age of about forty-two, he received the patronage of queen Hutaosa and a ruler named Vishtaspa, an early adherent of Zoroastrianism (possibly from Bactria according to the Shahnameh).


title: Zoroaster

text: According to the tradition, he lived for many years after Vishtaspa's conversion, managed to establish a faithful community, and married three times. His first two wives bore him three sons, Isat Vâstra, Urvatat Nara, and Hvare Chithra, and three daughters, Freni, Thriti, and Pouruchista. His third wife, Hvōvi, was childless. Zoroaster died when he was 77 years and 40 days old. The later Pahlavi sources like Shahnameh, instead claim that an obscure conflict with Tuiryas people led to his death, murdered by a "karapan" (a priest of the old religion) named Brādrēs.


title: Zoroaster

text: The Cypress of Kashmar is a mythical cypress tree of legendary beauty and gargantuan dimensions. It is said to have sprung from a branch brought by Zoroaster from Paradise and to have stood in today's Kashmar in northeastern Iran and to have been planted by Zoroaster in honor of the conversion of King Vishtaspa to Zoroastrianism. According to the Iranian physicist and historian Zakariya al-Qazwini King Vishtaspa had been a patron of Zoroaster who planted the tree himself. In his "ʿAjā'ib al-makhlūqāt wa gharā'ib al-mawjūdāt" ("The Wonders of Creatures and the Marvels of Creation"), he further describes how the Al-Mutawakkil in 247 AH (861 AD) caused the mighty cypress to be felled, and then transported it across Iran, to be used for beams in his new palace at Samarra. Before, he wanted the tree to be reconstructed before his eyes. This was done in spite of protests by the Iranians, who offered a very great sum of money to save the tree. Al-Mutawakkil never saw the cypress, because he was murdered by a Turkic soldier (possibly in the employ of his son) on the night when it arrived on the banks of the Tigris.


title: Zoroaster

text: A number of parallels have been drawn between Zoroastrian teachings and Islam. Such parallels include the evident similarities between Amesha Spenta and the archangel Gabriel, praying five times a day, covering one's head during prayer, and the mention of Thamud and Iram of the Pillars in the Quran. These may also indicate the vast influence of the Achaemenid Empire on the development of either religion.


title: Zoroaster

text: The Sabaeans, who believed in free will coincident with Zoroastrians, are also mentioned in the Quran.


title: Zoroaster

text: Like the Greeks of classical antiquity, Islamic tradition understands Zoroaster to be the founding prophet of the Magians (via Aramaic, Arabic "Majus", collective "Majusya"). The 11th-century Cordoban Ibn Hazm (Zahiri school) contends that "Kitabi" "of the Book" cannot apply in light of the Zoroastrian assertion that their books were destroyed by Alexander. Citing the authority of the 8th-century al-Kalbi, the 9th- and 10th-century Sunni historian al-Tabari (I, 648) reports that Zaradusht bin Isfiman (an Arabic adaptation of "Zarathustra Spitama") was an inhabitant of Israel and a servant of one of the disciples of the prophet Jeremiah. According to this tale, Zaradusht defrauded his master, who cursed him, causing him to become leprous (cf. Elisha's servant Gehazi in Jewish Scripture).


title: Zoroaster

text: The apostate Zaradusht then eventually made his way to Balkh (present day Afghanistan) where he converted Bishtasb (i.e. Vishtaspa), who in turn compelled his subjects to adopt the religion of the Magians. Recalling other tradition, al-Tabari (I, 681–683) recounts that Zaradusht accompanied a Jewish prophet to Bishtasb/Vishtaspa. Upon their arrival, Zaradusht translated the sage's Hebrew teachings for the king and so convinced him to convert (Tabari also notes that they had previously been "Sabi"s) to the Magian religion.


title: Zoroaster

text: The 12th-century heresiographer al-Shahrastani describes the Majusiya into three sects, the "Kayumarthiya", the "Zurwaniya" and the "Zaradushtiya", among which Al-Shahrastani asserts that only the last of the three were properly followers of Zoroaster. As regards the recognition of a prophet, Zoroaster has said: "They ask you as to how should they recognize a prophet and believe him to be true in what he says; tell them what he knows the others do not, and he shall tell you even what lies hidden in your nature; he shall be able to tell you whatever you ask him and he shall perform such things which others cannot perform." (Namah Shat Vakhshur Zartust, .5–7. 50–54)