Personal Data Classification and Controls (1000 words essay )
wfwfaf
CSC-200---Week-1---Lectures-1--2-1-15.pdf
8/23/2017
1
CSC 200 – Cyberspace and Cybersecurity
Lokesh Ramamoorthi
Outline
• What is cyberspace?
• Influence of cyberspace in today’s world
• Information security on cyberspace
• Threats
• Multi-disciplinary approach for a safer cyberspace
2
8/23/2017
2
Imaginary view of Cyberspace
Representation of Cyberspace
Servers
Gateway
Router
Router Router
Router
Router
8/23/2017
3
A layered View of Cyberspace
Image Source: http://www.science.mod.uk/getfileui.aspx?727
Scenario
• Adam works as a Claims Representative for a reputed health care organization. His is very diligent in maintaining his daily routine.
• His usual day starts with an exercise walk of 10,000 steps, then he stops by a juice bar for his protein milkshake. He reads news on his tablet and heads to work. Before entering the office lobby, he picks up his coffee from a famous coffee chain store.
• At work, he approves the insurance claims and processes the settlements for his company’s customers. Post lunch break, he orders a few books from an online bookstore.
• On his way back home he drives through his bank ATM, makes a withdrawal. He also orders a take-out pizza from the nearest pizza shop, so that he can have fun streaming a movie in his home theater system. At work he occasionally checks the home monitoring system’s website, to ensure the safety of his home.
8/23/2017
4
Activity 1: Exercise
Device/Medium: Fitbit
Information: Steps, heartbeat, pulse
Classification: Health Information
Activity 2: Purchase Juice
Device/Medium: Credit Card Reader
Information: Credit Card Data
Classification: Financial Information
8/23/2017
5
Activity 3: Read News
Device/Medium: iPAD
Information: News Prefernces
Classification: Personal Information
Activity 4: Travel to Work
Device/Medium: GPS Device
Information: Demographics
Classification: Personal Information
8/23/2017
6
Activity 5: Pay Toll on Highway
Device/Medium: Toll Transponder
Information: Demographics
Classification: Personal Information
Activity 6: Purchase Morning Coffee
Device/Medium: App
Information: Account Balance/Credit Card
Classification: Financial Information
8/23/2017
7
Activity 7: Enter Workplace
Device/Medium: Access Control System
Information: Demographics/Presence
Classification: Personal Information
Activity 8: Walk Around Office
Device/Medium: CCTV Cameras
Information: Demographics/Presence
Classification: Security Information
8/23/2017
8
Activity 9: Process Claims
Device/Medium: Desktop/Work Laptop
Information: Health Insurance
Classification: Personal Health Information
Activity 10: Purchase Online
Device/Medium: Desktop/Laptop
Information: Lifestyle, Credit Card Data, Shopping Preferences
Classification: Lifestyle and Personal Information
8/23/2017
9
Activity 11: Withdraw Cash From ATM
Device/Medium: ATM Machine
Information: Financial Information
Classification: Financial Information
Activity 12: Purchase Pizza
Device/Medium: Point of Sale Terminal
Information: Lifestyle, Credit Card Data
Classification: Personal Information and Financial Information
8/23/2017
10
Activity 13: Stream Movies
Device/Medium: Smart TV
Information: Personal Information
Classification: Personal Lifestyle Information
Activity 14: Home Monitoring System
Device/Medium: Home Monitoring Cameras
Information: Physical Location
Classification: Personal Information
8/23/2017
11
Activity 15: Commute
Device/Medium: Mobile Phone
Information: Physical Location
Classification: Personal Information
Activity 16: Read Emails
Device/Medium: Desktop/Computer
Information: Work Related Information, Vendors, Customers
Classification: Business Information
8/23/2017
12
Activity 17: Access Social Media
Device/Medium: Desktop/Laptop/Mobile Phone
Information: Friends, Demographics, Personal Preferences
Classification: Personal Information
Information
• Individuals • Public Information
• Personal Information
• Financial Information
• Health Information
• Educational Information
• Organizations • Public Information
• Financial Information
• Employees Information
• Customers Information
• Trade secrets and
• Internal Processes information
and more …
8/23/2017
13
Cyberspace
Building Blocks of Cyberspace
Users of Cyberspace
Normal Users Malicious Users
Vulnerabilities Threats
Risks in Cyberspace
Source Video URL: https://www.youtube.com/watch?v=bjYhmX_OUQQ
8/23/2017
14
Information Security
• Flow of information is ubiquitous, affecting all aspects of our personal and professional lives.
• Software vulnerabilities are equally ubiquitous, jeopardizing:
• personal identities
• intellectual property
• consumer trust
• business services
• operations, and continuity
• critical infrastructures & government
The CIA Triad of Information Security
Information Security
Confidentiality
IntegrityAvailability
8/23/2017
15
C-I-A Triad
• Confidentiality
• Integrity
• Availability
• Sometimes two other desirable characteristics: • Authentication
• Nonrepudiation 29
Confidentiality
The information that is classified as private should remain secret. The secrecy should be enforced at each level of data processing and should prevent unauthorized disclosure
The threats to confidentiality include stealing of confidential information such as Social Security Numbers, Protected Health Information, trade secrets etc.,
