crac-1
Comments-1 100 Words. The data privacy is referred to as the piece of data or information that requires to be handled depending on its relative importance. It is described as the aspect of IT information technology that deals with the ability of an individual or organization that identifies what information/data present in the computer system could be exchangedshared with third parties. In the digital world, the theory of data privacy is typically implemented to critical personal data, also called personally identifiable information. This includes medical and health records, Social Security number, bank account details, and financial data etcetera. It also includes the data that assists the organization to operate; either it is development data or proprietary research. The objectives of the Private Act are: To limit disclosure of personally identifiable data held by agencies. To permit individuals increased rights to access personal records that are maintained by agencies. To implement a code of "fair data practices" that need agencies to comply with legal norms for maintaining, gathering and disseminating the records (Ioannou, 2020).
Explanation: Importance of privacy and compliance with the privacy regulations: The privacy is usually described as the right or freedom from intrusion or interference. It is usually focused on the utilization and governance of personal information and personally identifiable data. Privacy is an important aspect as it helps an individual to maintain their individuality and autonomy. The people describe themselves by practicing power over data regarding themselves and the free country doesn't ask people to answer for the choices they make regarding what data is exchanged and what is kept private. Privacy is significant because of its functional advantages. Further, it is also beneficial for organizations as the organization that embraces user privacy will always be rewarded by customer loyalty. The importance of compliance with privacy regulations are as follows: Greater customer confidence: The privacy regulations will help the organization in proving that they are the good custodian of information. It mandates that every organization should comprise a data protection officer with a regular audit of information processing tasks. Under privacy regulations, organizations need to follow a framework that helps in keeping personally identifiable information protected. Enhanced information security: Cybersecurity breaches are the biggest threats to organizations. The privacy regulations mandate utilization of privileged and identity access management to facilitate only a few authorized accesses to sensitive information in the organization, hence, ensuring the data that it doesn't fall into malicious hands (Bhatia & Malhotra, 2018).
Minimized data maintenance costs: Complying the privacy regulation can assist the organization cut cost by prompting the organization to remove any information inventory software and legacy applications that are no longer significant to the business. Information that is protected by the Privacy Act: The Privacy Act secures personal data of an individual that is held by the federal government by preserving unauthorized disclosures of data. Moreover, people also have the right to review, request corrections and be informed of any breach or disclosure. Its main objective is to balance the requirement of government to handle data regarding an individual with the rights of individuals to be secured against the unwarranted intrusions of their privacy resulting from the maintenance, collection, disclosure, and utilization of personal data (Ioannou, 2020).
References
Ioannou, C. (2020, September). A Framework for Privacy Policy Compliance in the Internet of Things. In International Conference on Research Challenges in Information Science (pp. 595-603). Springer, Cham.
Bhatia, S., & Malhotra, J. (2018). CSPCR: Cloud Security, Privacy and Compliance Readiness-A Trustworthy Framework. International Journal of Electrical & Computer Engineering (2088-8708), 8.
Bottom of Form
Comments-2 100 Words. As we all now, the Privacy Act of 1974 is a public This Act has been taken into consideration in order of the concerns about the creation and utilization of modernized databases may affect people's protection rights. It shields security through making four procedural and substantive rights in close to home information. To start with, it requires government offices to show an individual any records kept on the person in question. Second, it expects organizations to follow certain standards, called reasonable data rehearses, when assembling and dealing with individual information. Third, it places limitations on how offices can impart a person's information to others and offices. Fourth lastly, it lets people sue the administration for damaging its arrangements (Bhatia & Malhotra, 2018).
There are some government organizations that are occupied with law implementation can pardon themselves from the Act's principles. Organizations have additionally dodged data sharing guidelines by abusing a standard use" exclusion. The government fundamentally keeps many databases on unique individuals. As innovation progressed through the 1960s and 70s, it got simpler for offices to cross-reference people's close to home information. Residents and administrators started to think about the ways that this data, whenever incorporated, could be manhandled. With PCs ready to look through and cross-reference documents rapidly and effectively, plainly different subtleties of an individual's life could be aggregated into a solitary database (Mazmudar & Goldberg, 2020).
The Privacy Act, not at all like the Freedom of Information Act, just covers U.S. residents and perpetual occupants. Hence, just a resident or lasting occupant can sue under the Privacy Act.
Furthermore, the Act applies just to certain central government offices aside from Section 7 of the Act, which spots confines on the Social Security Number that apply to bureaucratic, state, and nearby governments Beside Section 7, state and neighbourhood governments are not secured by the Privacy Act, however singular states may have their own laws with respect to record keeping on people. Official offices, military divisions, free administrative offices, and government-controlled enterprises are altogether secured by the Act. This implies government-controlled organizations like the U.S. Postal Service ought to be secured just as the military and official offices like the Department of Education, the FDA, and FBI, to give some examples. Neither place of Congress is remembered for this definition, however the Office of the President is (Bhatia & Malhotra, 2018).
The Act regularly alludes to frameworks of records.An arrangement of records is characterized as any gathering of records where data is recovered by the name of the individual or by an individual identifier. Databases and assortments of records that don't permit recovery of data on specific people are excluded (Mazmudar & Goldberg, 2020).
To forestall the presence of mystery databases, offices must distribute the subtleties of every one of their frameworks of records in the Federal Register. The distribution must cover expected employments of the framework and take into account intrigued people to submit composed information, perspectives, or contentions to the organization. Whenever that an office wishes to build up or altogether change an arrangement of records, it should likewise advise ahead of time the Committee on Government Operations of the House of Representatives, the Committee on Governmental Affairs of the Senate, and the Office of Management and Budget. These bodies will at that point assess the likely or potential impact of the proposition on the privileges of people (Bhatia & Malhotra, 2018).
The Privacy Act requires any organization keeping up an arrangement of records to give an individual access to any records they may have about him. He ought to be permitted to audit the record and make duplicates of it. On the off chance that the record is inadequate or in mistake, he is likewise qualified for ask that his record be rectified. The office should then react to this solicitation inside ten business days, either by rolling out the mentioned improvements or by explaining to the individual why they have would not modify his record. The organization should then advise the individual who to converse with on the off chance that he needs a higher authority to audit the refusal (Mazmudar & Goldberg, 2020).
On the off chance that the individual chooses to request, the organization has thirty business days to finish an audit of the refusal. The office can broaden this thirty-day limit, yet just "for good purpose appeared." If, after the audit, the organization despite everything chooses not to change the record, the individual can document an announcement clarifying why he can't help contradicting the office's refusal. The organization must incorporate this announcement with any duplicates of the record that it uncovers from that time on The office is additionally required to mention to the individual what he can do to take the case to a court (Bhatia & Malhotra, 2018).
As much as the Privacy Act does to secure individual protection, various special cases to it exist. These special cases just as the functional challenges engaged with keeping up and controlling such a huge arrangement of databases imply that individual security isn't frequently as painstakingly ensured as the drafters of the Privacy Act may have enjoyed. Since record frameworks of records and organizations are barely characterized, the Act may not cover numerous sorts of databases and information gathering exercises. Additionally, there are sure special cases given for law authorization purposes Finally, the standard use" exemption permits government organizations to unveil separately recognizable data just by expressing their arrangements to uncover that sort of data when they make or adjust the database (Mazmudar & Goldberg, 2020).
The Privacy Act characterizes a "record" as a data that incorporates an individual's "name, or the recognizing number, image, or other distinguishing specific allocated to the individual, for example, a finger or voice print or a photo. While it might have been amazingly troublesome in 1974 to influence somebody's protection without knowing their name, Social Security number or appearance, the refinement of the present databases make it a lot simpler to single out a person from a lot of realities, none of which is in itself a distinguishing specific (Bhatia & Malhotra, 2018).
The Act additionally constrains frameworks of records to those gatherings of records "from which data is recovered by the name of the individual or by some recognizing number, image, or other distinguishing specific allotted to the person As the Privacy Protection Study Commission noted, numerous databases contain actually recognizable data, yet don't recover records by that data. Any such databases would be absolved from the arrangements of the Privacy Act, however they may contain a similar data may at present be utilized similarly that an authoritatively perceived arrangement of records would be (Mazmudar & Goldberg, 2020).
References
Bhatia, S., & Malhotra, J. (2018). CSPCR: Cloud Security, Privacy and Compliance Readiness-A Trustworthy Framework. International Journal of Electrical & Computer Engineering (2088-8708), 8.
Mazmudar, M., & Goldberg, I. (2020). Mitigator: Privacy policy compliance using trusted hardware. Proceedings on Privacy Enhancing Technologies, 1, 18.
Comments-3 100 Words. River Cipher 4 (RC4) as a stream cipher depends on two algorithms and secret keys for encryption. Been a part of the cryptosystems decryption by the receiver is required to make the message readable. Text, as well as bits, are joined in the algorithms to form the key-scheduling algorithm (KSA) and Pseudo-random generation algorithm (PRGA). Over the years, the encryption algorithms have presented both advantages leading to strengths and disadvantages, resulting in the RC4’s weaknesses.
One of the strengths entails the speed of the encryption in systems. RC4 is articulated to have a higher speed which is ten times faster as compared to other algorithms in DES (Jindal & Singh, 2015). Secondly, the algorithms in the encryption create difficulty in knowing the location in the table through which each value in the sequence is selected. The action limits third party abilities to interfere and intercept the transmission of data. A third strength is associated with the singular use of the RC4 key. This ensures that keys are not repeated increasing system vulnerabilities (Jindal & Singh, 2015).
Some of the weaknesses stipulated in the application of RC4 include increased vulnerabilities to analytic attacks. An analysis of the algorithm and selected keys can reduce security protocols in the systems. Another weakness of encryption involves the application of weak keys (Jindal & Singh, 2015). Key bytes used are highly dependent on the subset of keys which can be accessed through cryptanalysis. The weakness can lead to a distinguishing attack which uses bias in the output sequence (Jindal & Singh, 2015). The attack increases stream cipher from weak authentication.
References
Jindal, P. & Singh, B. (2015). RC4 encryption; a literature review. Procedia computer science 46.
Comments-4100 Words. Assessment of RC4 Cipher
The RC4 encryption algorithm is a cipher algorithm that consists of a shared key stream that needs a secure exchange of the shared key. Organizations should not the fact that RC4 is not considered secure anymore and thus there is need to be careful concerning how it is applied in organizations.
Advantages
The RC4 encryption algorithm ensures that there is difficulty concerning the provision of where any particular value is placed in the table. Attackers also find it difficult to realize the location in the table that is used to ensure the selection of every value in a particular sequence (Stallings, 2018). The encryption of the RC4 cipher is approximately ten times faster as compared to the DES algorithms. The software resources available for implementation of RC4 are provided in various formats. Organizations can also consider the use of software that has undergone optimization and enjoys important levels associated with hardware complexity to be better placed to utilize designated instructions for effective performance (Stallings, 2018). Special assistance hardware is considered while ensuring that the exchange and manipulation operations are effectively implemented (Stallings, 2018). The provision of the RAM space required by the key byte generator is essential as it helps in the local maintenance of the state tables that are required for generating keys.
Disadvantages
The fact that any RC4 stream cipher can be used once is an important configuration that should always be ensured. RC4 is also not considered to be secure anymore. One out of every 256 keys is considered a weak one (Rifki et al., 2018). Cryptanalysis is used in the identification of these keys while also making it easier to find the circumstances where one of those bytes that are generated more ends up being strongly associated with the few bytes that are associated.
References
Rifki, R., Septiarini, A., & Hatta, H. R. (2018). Cryptography using random Rc4 stream cipher on SMS for android-based smartphones. IJACSA) International Journal of Advanced Computer Science and Applications, 9(12).
Stallings, W. (2018). Cryptography & Network Security GE (8th Ed.). Pearson Australia Pty Limited.