security, privacy, and ethical issues in information systems and the internet

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 1

Security, Privacy, and Ethical Issues in Information Systems and

the Internet

Chapter 14

Principles and Learning Objectives

• Policies and procedures must be established to avoid computer waste and mistakes.

– Describe some examples of waste and mistakes in an IS environment, their causes, and possible solutions.

– Identify policies and procedures useful in eliminating waste and mistakes.

• Computer crime is a serious and rapidly growing area of concern requiring management attention.

– Explain the types and effects of computer crime.– Identify specific measures to prevent computer crime.– Discuss the principles and limits of an individual’s

right to privacy.

• Jobs, equipment, and working conditions must be designed to avoid negative health effects.

– List the important effects of computers on the work environment.

– Identify specific actions that must be taken to ensure the health and safety of employees.

– Outline criteria for the ethical use of information systems.

Social Issues in Information Systems

Computer Waste & Mistakes

Computer Waste

• Discard technology• Unused systems• Personal use of corporate time and technology

Preventing Computer Waste and Mistakes

• Establish Policies and Procedures• Implement Policies and Procedures• Monitor Policies and Procedures• Review Policies and Procedures

Preventing Computer-Related Waste and Mistakes

Implementing Policies and Procedures

Computer Crime

Number of Incidents Reported to CERT

Computer Crime and Security Survey

The Computer as a Tool to Commit Crime

• Social engineering• Dumpster diving• Identity theft• Cyberterrorism

Computers as Objects of Crime

• Illegal access and use– Hackers vs. crackers– Script bunnies– Insiders

Illegal Access and Use

Data Alteration and Destruction

• Virus– Application virus– System virus– Macro virus

• Worm• Logic bomb

Data Alteration and Destruction

Top Viruses – July 2002

Computers as Objects of Crime

• Information and equipment theft• Software and Internet piracy• Computer-related scams• International computer crime

Preventing Computer-Related Crime

• Crime prevention by state and federal agencies• Crime prevention by corporations

– Public Key Infrastructure (PKI)– Biometrics

• Antivirus programs

Preventing Computer-Related Crime

• Intrusion Detection Software• Managed Security Service Providers (MSSPs)• Internet Laws for Libel and Protection of

Decency

Preventing Crime on the Internet

• Develop effective Internet and security policies• Use a stand-alone firewall with network monitoring

capabilities• Monitor managers and employees• Use Internet security specialists to perform audits

Common Methods Used to Commit Computer Crimes

How to Protect Your Corporate Data from Hackers

Privacy

Privacy Issues

• Privacy and the Federal Government• Privacy at work• E-mail privacy• Privacy and the Internet

Using Antivirus Programs

Fairness and Information Use

Federal Privacy Laws and Regulations

• The Privacy Act of 1979• Gramm-Leach-Bliley Act• USA Patriot Act

Other Federal Privacy Laws

The Work Environment

Health Concerns

• Repetitive stress injury (RSI)• Carpal tunnel syndrome (CTS)• Ergonomics

Avoiding Health and Environment Problems

• Maintain good posture and positioning.• Don’t ignore pain or discomfort.• Use stretching and strengthening exercises.• Find a good physician who is familiar with RSI and how

to treat it.

Medical Topics on the Internet

Ethical Issues in Information Systems

• The AITP Code of Ethics– Obligation to management– Obligation to fellow AITP members– Obligation to society

• The ACM Code of Professional Conduct– Acquire and maintain professional competence

AITP Code of Ethics

Summary

• Computer waste - the inappropriate use of computer technology and resources in both the public and private sectors

• Software and Internet piracy - represent the most common computer crime

• Ethics - determine generally accepted and discouraged activities within a company

security, privacy, and ethical issues in information systems and the internet

computers instructor

important effects of

procedures msis

effects of computer

proceduresmonitor policies

proceduresimplement

mistakesestablish policies

proceduresreview policies

Documents

explore data privacy ◦ examples, issues and surveys ◦...

internet cookies: changing internet use and privacy

outlines ethics and research process ethical principles...

ethics and privacy. 3.1 ethical issues 3.2 privacy

ethical and privacy challenges in internet policy

internet privacy and monitoring

the internet, privacy

privacy with internet

bus 311: fall 2003 1 security, privacy, and ethical issues...

ethical use of internet

internet privacy

internet privacy research

deliverable d1: legal, social, economic and ethical ... ·...

internet privacy update

internet privacy internet technologies and applications

privacy issues and internet privacy

thierer internet privacy regulation

chapter 14 security, privacy, & ethical issues in is & the...

internet privacy anonsec

designing privacy into internet protocols iab privacy...