4.1.2 area 2016

4.1 Computer Ethics4.1.2 Areas of computer ethics

Chapter Four

At the end of this topic, students should be able to:

b) Define computer ethics

c) Describe areas of computer ethics

What to cover?

1. Information accuracy

2. Green computing

3. Codes of conduct

4. Information privacy

5. Intellectual property

2

Define computer ethics

• Computer ethics are the moral guidelines that govern the use of computers and information systems

Discovering Computers : Chapter 11 3Pages 581 – 582

Figure 11-28


2. Green computing

3. Codes of conduct


5. Intellectual property

4

Areas of computer ethics

Areas of computer ethics

• Information accuracy is a concern

– Not all information on the Web is correct


Figure 11-28


• Green computing involves reducing the electricity and environmental waste while using a computer


Figure 11-30

2. Green Computing

Discovering Computers : Chapter 11 7Page 583

Figure 11-29

• An IT code of conduct is a written guideline that helps determine whether a specific computer action is ethical or unethical

3. Code of conduct

• Information privacy refers to the right of individuals and companies to deny or restrict the collection and use of information about them

• Huge databases store data online

• It is important to safeguard your information




Figure 11-31


• When you fill out a form, the merchant that receives the form usually enters it into a database

• Many companies today allow people to specify whether they want their personal information distributed


Figure 11-32


• A cookie is a small text file that a Web server stores on your computer

• Web sites use cookies for a variety of reasons:


Allow for personalization

Store users’ passwords

Assist with online

shopping

Track how often users visit a site

Target advertisements



Figure 11-33


• Spam is an unsolicited e-mail message or newsgroup posting

• E-mail filtering blockse-mail messages from designated sources

• Anti-spam programsattempt to remove spam before it reaches your inbox


Figure 11-34


• Phishing is a scam in which a perpetrator sends an official looking e-mail message that attempts to obtain your personal and financial information

• Pharming is a scam where a perpetrator attempts to obtain your personal and financial information via spoofing

Discovering Computers : Chapter 11 14Pages 587 - 588

Figure 11-35



• Intellectual Property (IP) - unique and original works (i.e ideas,inventions,art,writing,product,logos)

• Intellectual property rights are the rights to which creators are entitled for their work

5. Intellectual Property

Importance of Intellectual Property

The importance of Intellectual Property ;

● to protect the original creation from individuals.

● to preserve features and process that make thing work ( inventor will therefore benefits - get a profit , from their work)

previous CS015 Computer Security Risk slideshow

Type of Intellectual Property

http://www.myipo.gov.my/home

A patent is an exclusive right granted for an invention, which is a product or a process that provides a new way of doing something, or offers a new technical solution to a problem.

A trade mark is a sign which distinguishes the goods and services of one trader from those of another. A mark includes words, logos, pictures, names, letters, numbers or a combination of these.

A copyright exclusive rights given to author/artistfor their materials (literary works; musical works;artistic works; films; sound recordings;broadcasts; and derivative works)



4.2 Computer Security4.2.1 Computer Security Risks

Chapter Four


a) Define computer security risks

c) Identify types computer security risks

What to cover?

1. Malicious code (virus, worm, Trojan horse)

2. Unauthorized access and use

3. Hardware theft

4. Software theft

5. Information theft

6. System failure

19

Computer Security Risks

• A computer security risk is any event or action that could cause a loss of or damage to computer hardware, software, data, information, or processing capability

• A cybercrime is an online or Internet-based illegal act


Hackers Crackers Script Kiddies Corporate Spies

Unethical Employees

Cyberextortionists Cyberterrorists

Types of Computer Security Risks

1. Malicious code (virus, worm, Trojan horse)

2. Unauthorized access and use

3. Hardware theft

4. Software theft

5. Information theft

6. System failure

21

1. Malicious code

22

• Every unprotected computer is susceptible to the first type of computer security risk

• Computer viruses, worms, Trojan horses, and rootkits are classified as malware (short for malicious software).

• Malware - program that act without user's knowledge and deliberately alter the computer's operation.

Computer Virus

• Affects a computer negatively by altering the way the computer works

Worm

• Copies itself repeatedly, using up resources and possibly shutting down the computer or network

Trojan Horse

• A malicious program that hides within or looks like a legitimate program

Rootkit

• Program that hides in a computer and allows someone from a remote location to take full control


1. Malicious codeType of Malicious code

• An infected computer has one or more of the following symptoms:


Operating system runs much slower

than usual

Available memory is less than expected

Files become corrupted

Screen displays unusual message

or image

Music or unusual sound plays randomly

Existing programs and files disappear

Programs or files do not work

properly

Unknown programs or files

mysteriously appear

System properties change

Operating system does not start up

Operating system shuts down

unexpectedly

1. Malicious code


Figure 11-3

1. Malicious code

• Users can take several precautions to protect their home and work computers and mobile devices from these malicious infections

Discovering Computers : Chapter 11 26Page 560 – 561

Figure 11-7

1. Malicious code

• A botnet is a group of compromised computers connected to a network– A compromised computer is known as a zombie

• A denial of service attack (DoS attack) disrupts computer access to Internet services– Distributed DoS (DDoS)

• A back door is a program or set of instructions in a program that allow users to bypass security controls

• Spoofing is a technique intruders use to make their network or Internet transmission appear legitimate


1. Malicious codeOther Types of Malicious code

2. Unauthorized Access and Use

Unauthorized access is the use of a computer or

network without permission

Unauthorized use is the use of a computer or its data for unapproved or possibly illegal activities



• Organizations take several measures to help prevent unauthorized access and use– Acceptable use policy

– Disable file and printer sharing

– Firewalls

– Intrusion detection software


Figure 11-10


• Access controls define who can access a computer, when they can access it, and what actions they can take

– Two-phase processes called identification and authentication

– User name

– Password

– Passphrase

– CAPTCHA


Figure 11-11


• A possessed object is any item that you must carry to gain access to a computer or computer facility– Often are used in

combination with a personal identification number (PIN)

• A biometric deviceauthenticates a person’s identity by translating a personal characteristic into a digital code that is compared with a digital code in a computer


Figure 11-14


• Digital forensics is the discovery, collection, and analysis of evidence found on computers and networks

• Many areas use digital forensics

Discovering Computers :Chapter 11 32Page 569

Law enforcement

Criminal prosecutors

Military intelligence

Insurance agencies

Information security

departments

3. Hardware Theft and Vandalism

Hardware theft is the act of stealing

computer equipment

Hardware vandalismis the act of defacing

or destroying computer equipment


3. Hardware Theft and Vandalism

• To help reduce the of chances of theft, companies and schools use a variety of security measures


Figure 11-15

Physical access controls Alarm systemsCables to lock

equipment

Real time location system

Passwords, possessed objects, and biometrics

4. Software Theft

• Software theft occurs when someone:


Steals software media

Intentionally erases programs

Illegally copies a program

Illegally registers and/or

activates a program

4. Software Theft

• A single-user license agreement typically contains the following conditions:


Permitted to

• Install the software on one computer

• Make one copy of the software

• Remove the software from your computer before giving it away or selling it

Not permitted to

• Install the software on a network

• Give copies to friends or colleagues while continuing to use the software

• Export the software

• Rent or lease the software

4. Software Theft

• Copying, loaning, borrowing, renting, or distributing software can be a violation of copyright law

• Some software requires product activation to function fully


Figure 11-16

5. Information Theft

• Information theft occurs when someone steals personal or confidential information

• Encryption is a process of converting readable data into unreadable characters to prevent unauthorized access

• Decryption is a process of converting from unreadable characters into readable form of data


Figure 11-17



Figure 11-18


• A digital signature is an encrypted code that a person, Web site, or organization attaches to an electronic message to verify the identity of the sender

– Often used to ensure that an impostor is not participating in an Internet transaction

• Web browsers and Web sites use encryption techniques



• Popular security techniques include


Digital Certificates

Transport Layer Security (TLS)

Secure HTTP VPN



Figures 11-19 – 11-20

6. System Failure

• A system failure is the prolonged malfunction of a computer

• A variety of factors can lead to system failure, including:

– Aging hardware

– Natural disasters

– Electrical power problems

• Noise, undervoltages, and overvoltages

– Errors in computer programs


6. System Failure

• Two ways to protect from system failures caused by electrical power variations include surge protectors and uninterruptable power supplies(UPS)


Figures 11-21 – 11-22

4.2 Computer Security4.2.2 Security Measures

Chapter Four


Identify different ways to overcome security risks

What to cover?

1. Data backup

2. Cryptography

3. Anti-virus

4. Anti-spyware

5. Firewall

6. Physical access control

7. Human aspects : awareness,

8. Related security risks with its measure

46

Chapter 11 - Manage Computing Securely. Safely and Ethically page 577

How

to safeguards a computer from ..ALL OF THE ABOVE ?

Common Security Risk ;#1 Internet & Network Attacks

#2 Unauthorized Access & Use

#3 Theft (Hardware/Software/Information)

#4 System Failure

1. Data backup

• A backup is a duplicate of a file, program, or disk that can be used if the original is lost, damaged, or destroyed

– To back up a file means to make a copy of it

• Offsite backups are stored in a location separate from the computer site


Cloud Storage


How

to safeguards a computer

from ..System Failure ?

● to protect against electrical power variations, use

■ surge protector (also called surge-protector)● uses special electrical components to ;

○ stabilize current flow, and keep out overvoltage from reaching computer/electronic equipment.

■ uninterruptable power supply (UPS)● a device that contains surge protection

circuit and a batteries - that provide temporary power during loss of power.



How

to safeguards a computer

from ..Hardware, Software, Information

Theft

2. Cryptography

52

● to protect information on the Internet and networks, organizations and individuals use a variety of encryption techniques.

○ encryption - converting readable data (plaintext) into unreadable characters (ciphertext), preventing unauthorized access.

○ decryption - converting unreadable data (ciphertext) to its original state/data (plaintext)

○ the study of encryption and decryption process (to promote a secure communication) is often known as a cryptography.

How

to safeguards a

computer from viruses ?


● by using any antivirus program, user can safeguards a computer system from viruses and other malware.

● Antivirus program - a program that protects computer against viruses by identifying and removing any computer viruses found in memory, on storage media or on incoming files.

● Popular antivirus program ;○ Kaspersky Anti-Virus

○ avast! antivirus

○ CA Anti-Virus

○ McAfee VirusScan

○ AVG Anti-Virus


3. Anti virus

4. Firewall

• A firewall is hardware and/or software that protects a network’s resources from intrusion


Figure 11-8

Intrusion detection software

• Analyzes all network traffic

• Assesses system vulnerabilities

• Identifies any unauthorized intrusions

• Notifies network administrators of suspicious behavior patterns or system breaches

Honeypot

• Vulnerable computer that is set up to entice an intruder to break into it

Discovering Computers : Chapter 11 564

6. Physical access controls


● using physical access controls such as ;

○ locked doors and windows

● installing alarm systems for additional security.

● attach physical security devices such as cables that lock

○ equipment to desk.

○ mobile computer to a stationary object.

57

● to protect software media from being stolen owners should keep ..

○ original software boxes and media in secure location (i.e media cabinets with lock).

● to protect from software piracy, software manufacturers should ..

○ issue users license agreement,■ the right to use the software

● (single user license/end-user license agreement)


58

7. Human Aspect : Awareness

previous CS015 Computer Security Risk slideshow

● expose employees or staff to computer securitythrough continuously security training, courses.

● make a systematic routine check to update (security patches, virus definition,other malicious code) a computer system - early preventing a threat/risks.

● proper handling of computer and information

59


How

to safeguards a computer from ..Unauthorized Access and Use

60


Safeguards against Unauthorized Access and Use

● organizations should use access control to minimize the chance of a perpetrator intentionally accessing confidential information on a computer.

● Access control - a security measure that defines who can access computer, what actions they can take while accessing the computer.

● Two-phases process in implementing access-control is ;

○ identification ,■ process to verifies the validity of a user.

○ authentication■ process to verifies the individual is the person he or she claims to be.

61


Safeguards against Unauthorized Access and Use

● Identification and Authentication Methods

○ user name

○ password

● User name or user ID (identification), is a unique combination of characters (alphanumeric) that identifies one specific user.

● Password, private combination of characters associated with the user name that allow access to certain computer resources.

62