summarize the three most important things
papi2lit
M01_Introduction.pptxShelly Cashman: Microsoft Word 2016
Module 1: Introduction
Digital Security Ethics and Privacy
© 2017 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part, except for use as permitted in a license distributed with a certain product or service or otherwise on a password-protected website for classroom use.
‹#›
1
Objectives (1 of 2)
Define the term, digital security risks, and briefly describe the types of cybercriminals
Describe various types of Internet and network attacks, and explain ways to safeguard against these attacks
Discuss techniques to prevent unauthorized computer access and use
Explain the ways that software manufacturers protect against software piracy
Discuss how encryption, digital signatures, and digital certificates work
© 2017 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part, except for use as permitted in a license distributed with a certain product or service or otherwise on a password-protected website for classroom use.
‹#›
2
Objectives (2 of 2)
Identify safeguards against hardware theft, vandalism, and failure
Explain the options available for backing up
Identify risks and safeguards associated with wireless communications
Recognize issues related to information accuracy, intellectual property rights, codes of conduct, and green computing
Discuss issues surrounding information privacy
© 2017 Cengage Learning. All Rights Reserved. May not be copied, scanned, or duplicated, in whole or in part, except for use as permitted in a license distributed with a certain product or service or otherwise on a password-protected website for classroom use.
‹#›
3
Digital Security Risks
A digital security risk is any event or action that could cause a loss of or damage to a computer or mobile device hardware, software, data, information, or processing capability
Any illegal act involving the use of a computer or related devices generally is referred to as a computer crime
A cybercrime is an online or Internet-based illegal act
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
4
‹#›
4
Digital Security Risks
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
5
Hacker
Cracker
Script kiddie
Corporate spies
Unethical employees
Cyberextortionist
Cyberterrorist
‹#›
Internet and Network Attacks
Information transmitted over networks has a higher degree of security risk than information kept on an organization’s premises
Malware, short for malicious software, consists of programs that act without a user’s knowledge and deliberately alter the operations of computers and mobile devices
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
6
‹#›
6
Internet and Network Attacks
A botnet is a group of compromised computers or mobile devices connected to a network
A compromised computer or device is known as a zombie
A denial of service attack (DoS attack) disrupts computer access to an Internet service
Distributed DoS attack (DDoS attack)
A back door is a program or set of instructions in a program that allow users to bypass security controls
Spoofing is a technique intruders use to make their network or Internet transmission appear legitimate
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
7
‹#›
7
Internet and Network Attacks
A firewall is hardware and/or software that protects a network’s resources from intrusion
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
8
‹#›
8
Unauthorized Access and Use
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
9
‹#›
9
Unauthorized access is the use of a computer or network without permission
Unauthorized use is the use of a computer or its data for unapproved or possibly illegal activities
Unauthorized Access and Use
Organizations take several measures to help prevent unauthorized access and use
Acceptable use policy
Disable file and printer sharing
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
10
‹#›
10
Unauthorized Access and Use
Access controls define who can access a computer, device, or network; when they can access it; and what actions they can take while accessing it
The computer, device, or network should maintain an audit trail that records in a file both successful and unsuccessful access attempts
User name
Password
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
11
‹#›
11
Unauthorized Access and Use
A passphrase is a private combination of words, often containing mixed capitalization and punctuation, associated with a user name that allows access to certain computer resources
A PIN (personal identification number), sometimes called a passcode, is a numeric password, either assigned by a company or selected by a user
A possessed object is any item that you must possess, or carry with you, in order to gain access to a computer or computer facility
A biometric device authenticates a person’s identity by translating a personal characteristic into a digital code that is compared with a digital code in a computer or mobile device verifying a physical or behavioral characteristic
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
12
‹#›
12
Unauthorized Access and Use
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
13
Fingerprint reader
Face recognition system
Hand geometry system
Voice verification system
Signature verification system
Iris recognition system
‹#›
Unauthorized Access and Use
Two-step verification uses two separate methods, one after the next, to verify the identity of a user
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
14
‹#›
Unauthorized Access and Use
Digital forensics is the discovery, collection, and analysis of evidence found on computers and networks
Many areas use digital forensics
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
15
‹#›
15
Law enforcement
Criminal prosecutors
Military intelligence
Insurance agencies
Information security departments
Software Theft
Many manufacturers incorporate an activation process into their programs to ensure the software is not installed on more computers than legally licensed
During the product activation, which is conducted either online or by phone, users provide the software product’s identification number to associate the software with the computer or mobile device on which the software is installed
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
16
‹#›
16
Information Theft
Information theft occurs when someone steals personal or confidential information
Encryption is a process of converting data that is readable by humans into encoded characters to prevent unauthorized access
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
17
‹#›
17
Information Theft
A digital signature is an encrypted code that a person, website, or organization attaches to an electronic message to verify the identity of the message sender
Often used to ensure that an impostor is not participating in an Internet transaction
A digital certificate is a notice that guarantees a user or a website is legitimate
A website that uses encryption techniques to secure its data is known as a secure site
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
18
‹#›
18
Hardware Theft, Vandalism, and Failure
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
19
‹#›
19
Hardware theft is the act of stealing digital equipment
Hardware vandalism is the act of defacing or destroying digital equipment
Hardware Theft, Vandalism, and Failure
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
20
‹#›
20
Backing Up – The Ultimate Safeguard
A backup is a duplicate of a file, program, or media that can be used if the original is lost, damaged, or destroyed
To back up a file means to make a copy of it
Off-site backups are stored in a location separate from the computer or mobile device site
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
21
Cloud Storage
‹#›
21
Backing Up – The Ultimate Safeguard
Categories of backups:
Full
Differential
Incremental
Selective
Continuous data protection
Cloud
Three-generation backup policy
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
22
‹#›
22
Grandparent
Parent
Child
Backing Up – The Ultimate Safeguard
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
23
‹#›
Wireless Security
Wireless access poses additional security risks
Some perpetrators connect to other’s wireless networks to gain free Internet access or confidential data
Others connect to a network through an unsecured wireless access point (WAP) or combination router/WAP
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
24
‹#›
24
Ethics and Society
Technology ethics are the moral guidelines that govern the use of computers, mobile devices, information systems, and related technologies
Information accuracy is a concern
Not all information on the Internet is correct
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
25
‹#›
25
Ethics and Society
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
26
Intellectual property refers to unique and original works such as ideas, inventions, art, writings, processes, company and product names, and logos
Intellectual property rights are the rights to which creators are entitled to their work
A copyright protects any tangible form of expression
Digital rights management (DRM) is a strategy designed to prevent illegal distribution of movies, music, and other digital content
‹#›
26
Ethics and Society
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
27
A code of conduct is a written guideline that helps determine whether a specification is ethical/unethical or allowed/not allowed
‹#›
27
Ethics and Society
Green computing involves reducing the electricity and environmental waste while using computers, mobile devices, and related technologies
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
28
‹#›
28
Information Privacy
Information privacy refers to the right of individuals and companies to deny or restrict the collection, use, and dissemination of information about them
Huge databases store data online
Websites often collect data about you, so that they can customize advertisements and send you personalized email messages
Some employers monitor your computer usage and email messages
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
29
‹#›
29
Information Privacy
Information about you can be stored in a database when you:
Fill out a printed or online form
Create a profile on an online social network
Register a product warranty
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
30
‹#›
30
Information Privacy
A cookie is a small text file that a web server stores on your computer
Websites use cookies for a variety of reasons:
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
31
‹#›
31
Information Privacy
Phishing is a scam in which a perpetrator sends an official looking email message that attempts to obtain your personal and/or financial information
With clickjacking, an object that can be tapped or clicked on a website contains a malicious program
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
32
‹#›
32
Information Privacy
Spyware is a program placed on a computer or mobile device without the user’s knowledge that secretly collects information about the user and then communicates the information it collects to some outside source while the user is online
Adware is a program that displays an online advertisement in a banner or pop-up window on webpages, email messages, or other Internet services
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
33
‹#›
Information Privacy
Social engineering is defined as gaining unauthorized access to or obtaining confidential information by taking advantage of the trusting human nature of some victims and the naivety of others
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
34
‹#›
Information Privacy
The concern about privacy has led to the enactment of federal and state laws regarding the storage and disclosure of personal data
See Table 5-3 on page 246 for a listing of major U.S. government laws concerning privacy
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
35
‹#›
35
Information Privacy
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
36
‹#›
36
Employee monitoring involves the use of computers, mobile devices, or cameras to observe, record, and review an employee’s use of a technology, including communications such as email messages, keyboard activity (used to measure productivity), and websites visited
Many programs exist that easily allow employers to monitor employees. Further, it is legal for employers to use these programs
Information Privacy
Content filtering is the process of restricting access to certain material
Many businesses use content filtering
Web filtering software restricts access to specified websites
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
37
‹#›
37
Summary
© 2017 Cengage Learning®. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole or in part.
38
Variety of digital security risks
Cybercrime and cybercriminals
Risks and safeguards associated with Internet and network attacks, unauthorized access and use, software theft, information theft, and hardware theft, vandalism, and failure
Various backup strategies and methods of securing wireless communications
Ethical issues in society and various ways to protect the privacy of personal information
‹#›
38
