4.1.2 area 2016

4.1 Computer Ethics
4.1.2 Areas of computer ethics
Chapter Four
At the end of this topic, students should be able
to:
b) Define computer ethics
c) Describe areas of computer ethics

What to cover?
1. Information accuracy
2. Green computing
3. Codes of conduct
4. Information privacy
5. Intellectual property
2

Define computer ethics
• Computer ethics are
the moral guidelines
that govern the use of
computers and
information systems
Discovering Computers : Chapter 11 3Pages 581 – 582
Figure 11-28

2. Green computing
3. Codes of conduct
5. Intellectual property
4
Areas of computer ethics

Areas of computer ethics
• Information accuracy is a concern
– Not all information on the Web is correct
Figure 11-28

• Green computing involves reducing the electricity
and environmental waste while using a computer
Figure 11-30
2. Green Computing

Discovering Computers : Chapter 11 7Page 583
Figure 11-29
• An IT code of conduct is a written guideline that helps
determine whether a specific computer action is ethical or
unethical
3. Code of conduct

• Information privacy refers to the right of
individuals and companies to deny or restrict the
collection and use of information about them
• Huge databases store data online
• It is important to safeguard your information

Figure 11-31

• When you fill out a
form, the merchant that
receives the form
usually enters it into a
database
• Many companies today
allow people to specify
whether they want
their personal
information distributed
Figure 11-32

• A cookie is a small text file that a Web server stores on
your computer
• Web sites use cookies for a variety of reasons:
Allow for
personalization
Store users’
passwords
Assist with
online
shopping
Track how
often users
visit a site
Target
advertisements

Figure 11-33

• Spam is an unsolicited
e-mail message or
newsgroup posting
• E-mail filtering blocks
e-mail messages from
designated sources
• Anti-spam programs
attempt to remove
spam before it reaches
your inbox
Figure 11-34

• Phishing is a scam in
which a perpetrator sends
an official looking e-mail
message that attempts to
obtain your personal and
financial information
• Pharming is a scam
where a perpetrator
attempts to obtain your
personal and financial
information via spoofing
Discovering Computers : Chapter 11 14Pages 587 - 588
Figure 11-35

• Intellectual Property (IP) - unique and original works
(i.e ideas,inventions,art,writing,product,logos)
• Intellectual property rights are the rights to which
creators are entitled for their work
5. Intellectual Property

Importance of Intellectual Property
The importance of Intellectual Property ;
● to protect the original creation from individuals.
● to preserve features and process that make thing work ( inventor will
therefore benefits - get a profit , from their work)
previous CS015 Computer Security Risk slideshow

Type of Intellectual Property
http://www.myipo.gov.my/home
A patent is an exclusive right granted for an
invention, which is a product or a process that
provides a new way of doing something, or offers
a new technical solution to a problem.
A trade mark is a sign which distinguishes the
goods and services of one trader from those of
another. A mark includes words, logos, pictures,
names, letters, numbers or a combination of
these.
A copyright exclusive rights given to author/artist
for their materials (literary works; musical works;
artistic works; films; sound recordings;
broadcasts; and derivative works)

4.2 Computer Security
4.2.1 Computer Security Risks
Chapter Four
to:
a) Define computer security risks
c) Identify types computer security risks

What to cover?
1. Malicious code (virus, worm, Trojan horse)
2. Unauthorized access and use
3. Hardware theft
4. Software theft
5. Information theft
6. System failure
19

Computer Security Risks
• A computer security risk is any event or action that could
cause a loss of or damage to computer hardware,
software, data, information, or processing capability
• A cybercrime is an online or Internet-based illegal act
Hackers Crackers Script Kiddies Corporate Spies
Unethical
Employees
Cyberextortionists Cyberterrorists

Types of Computer Security Risks
1. Malicious code (virus, worm, Trojan horse)
2. Unauthorized access and use
3. Hardware theft
4. Software theft
5. Information theft
6. System failure
21

1. Malicious code
22
• Every unprotected computer is susceptible to the first type of
computer security risk
• Computer viruses, worms, Trojan horses, and rootkits are
classified as malware (short for malicious software).
• Malware - program that act without user's knowledge and
deliberately alter the computer's operation.

Computer
Virus
• Affects a
computer
negatively by
altering the
way the
computer
works
Worm
• Copies itself
repeatedly,
using up
resources
and possibly
shutting
down the
computer or
network
Trojan Horse
• A malicious
program that
hides within
or looks like
a legitimate
program
Rootkit
• Program that
hides in a
computer
and allows
someone
from a
remote
location to
take full
control
1. Malicious code
Type of Malicious code

• An infected computer has one or more of the
following symptoms:
Operating system
runs much slower
than usual
Available memory
is less than
expected
Files become
corrupted
Screen displays
unusual message
or image
Music or unusual
sound plays
randomly
Existing programs
and files disappear
Programs or files
do not work
properly
Unknown
programs or files
mysteriously
appear
System properties
change
Operating system
does not start up
Operating system
shuts down
unexpectedly
1. Malicious code

Figure 11-3
1. Malicious code

• Users can take several
precautions to protect
their home and work
computers and mobile
devices from these
malicious infections
Discovering Computers : Chapter 11 26Page 560 – 561
Figure 11-7
1. Malicious code

• A botnet is a group of compromised computers connected to a
network
– A compromised computer is known as a zombie
• A denial of service attack (DoS attack) disrupts computer access to
Internet services
– Distributed DoS (DDoS)
• A back door is a program or set of instructions in a program that
allow users to bypass security controls
• Spoofing is a technique intruders use to make their network or
Internet transmission appear legitimate
1. Malicious code
Other Types of Malicious code

2. Unauthorized Access and Use
Unauthorized access is
the use of a computer or
network without
permission
Unauthorized use is the
use of a computer or its
data for unapproved or
possibly illegal activities

• Organizations take
several measures to
help prevent
unauthorized access
and use
– Acceptable use policy
– Disable file and printer
sharing
– Firewalls
– Intrusion detection
software
Figure 11-10

• Access controls define who can access a
computer, when they can access it, and what
actions they can take
– Two-phase processes called identification and
authentication
– User name
– Password
– Passphrase
– CAPTCHA
Figure 11-11

• A possessed object is any
item that you must carry to
gain access to a computer
or computer facility
– Often are used in
combination with a personal
identification number (PIN)
• A biometric device
authenticates a person’s
identity by translating a
personal characteristic into
a digital code that is
compared with a digital
code in a computer
Figure 11-14

• Digital forensics is the discovery, collection, and
analysis of evidence found on computers and
networks
• Many areas use digital forensics
Discovering Computers :Chapter 11 32Page 569
Law
enforcement
Criminal
prosecutors
Military
intelligence
Insurance
agencies
Information
security
departments

3. Hardware Theft and Vandalism
Hardware theft is the
act of stealing
computer equipment
Hardware vandalism
is the act of defacing
or destroying
computer equipment

3. Hardware Theft and Vandalism
• To help reduce the of chances of theft, companies
and schools use a variety of security measures
Figure 11-15
Physical access controls Alarm systems
Cables to lock
equipment
Real time location
system
Passwords, possessed
objects, and biometrics

4. Software Theft
• Software theft occurs when someone:
Steals software
media
Intentionally
erases programs
Illegally copies a
program
Illegally
registers and/or
activates a
program

4. Software Theft
• A single-user license agreement typically contains the
following conditions:
Permitted to
• Install the software on one computer
• Make one copy of the software
• Remove the software from your computer before giving it away or selling it
Not permitted to
• Install the software on a network
• Give copies to friends or colleagues while continuing to use the software
• Export the software
• Rent or lease the software

4. Software Theft
• Copying, loaning,
borrowing, renting, or
distributing software
can be a violation of
copyright law
• Some software requires
product activation to
function fully
Figure 11-16

5. Information Theft
• Information theft occurs when someone steals personal
or confidential information
• Encryption is a process of converting readable data into
unreadable characters to prevent unauthorized access
• Decryption is a process of converting from unreadable
characters into readable form of data
Figure 11-17

Figure 11-18

• A digital signature is an encrypted code that a
person, Web site, or organization attaches to an
electronic message to verify the identity of the
sender
– Often used to ensure that an impostor is not
participating in an Internet transaction
• Web browsers and Web sites use encryption
techniques

• Popular security techniques include
Digital
Certificates
Transport Layer
Security (TLS)
Secure HTTP VPN

Figures 11-19 – 11-20

6. System Failure
• A system failure is the prolonged malfunction of a
computer
• A variety of factors can lead to system failure,
including:
– Aging hardware
– Natural disasters
– Electrical power problems
• Noise, undervoltages, and overvoltages
– Errors in computer programs

6. System Failure
• Two ways to protect from system failures caused
by electrical power variations include surge
protectors and uninterruptable power supplies
(UPS)
Figures 11-21 – 11-22

4.2 Computer Security
4.2.2 Security Measures
Chapter Four
to:
Identify different ways to overcome security risks

What to cover?
1. Data backup
2. Cryptography
3. Anti-virus
4. Anti-spyware
5. Firewall
6. Physical access control
7. Human aspects : awareness,
8. Related security risks with its measure
46

Chapter 11 - Manage Computing Securely. Safely and Ethically page 577
How
to safeguards a computer from ..
ALL OF THE ABOVE ?
Common Security Risk ;
#1 Internet & Network Attacks
#2 Unauthorized Access & Use
#3 Theft (Hardware/Software/Information)
#4 System Failure

1. Data backup
• A backup is a duplicate of a file, program, or disk
that can be used if the original is lost, damaged,
or destroyed
– To back up a file means to make a copy of it
• Offsite backups are stored in a location separate
from the computer site
Cloud
Storage

How
to safeguards a computer
from ..
System Failure ?

● to protect against electrical power
variations, use
■ surge protector (also called surge-
protector)
● uses special electrical components to ;
○ stabilize current flow, and keep out
overvoltage from reaching
computer/electronic equipment.
■ uninterruptable power supply (UPS)
● a device that contains surge protection
circuit and a batteries - that provide
temporary power during loss of power.

How
to safeguards a computer
from ..
Hardware, Software, Information
Theft

2. Cryptography
52
● to protect information on the Internet and
networks, organizations and individuals use a
variety of encryption techniques.
○ encryption - converting readable data (plaintext)
into unreadable characters (ciphertext),
preventing unauthorized access.
○ decryption - converting unreadable data
(ciphertext) to its original state/data (plaintext)
○ the study of encryption and decryption process
(to promote a secure communication) is often
known as a cryptography.

How
to safeguards a
computer from viruses ?

● by using any antivirus program, user can safeguards a
computer system from viruses and other malware.
● Antivirus program - a program that protects computer
against viruses by identifying and removing any computer
viruses found in memory, on storage media or on incoming
files.
● Popular antivirus program ;
○ Kaspersky Anti-Virus
○ avast! antivirus
○ CA Anti-Virus
○ McAfee VirusScan
○ AVG Anti-Virus
3. Anti virus

4. Firewall
• A firewall is hardware and/or software that
protects a network’s resources from intrusion
Figure 11-8

Intrusion detection software
• Analyzes all network traffic
• Assesses system vulnerabilities
• Identifies any unauthorized intrusions
• Notifies network administrators of suspicious behavior
patterns or system breaches
Honeypot
• Vulnerable computer that is set up to entice an intruder to
break into it

6. Physical access controls
● using physical access controls such as ;
○ locked doors and windows
● installing alarm systems for additional security.
● attach physical security devices such as cables that lock
○ equipment to desk.
○ mobile computer to a stationary object.
57

● to protect software media from
being stolen owners should keep ..
○ original software boxes and media in
secure location (i.e media cabinets
with lock).
● to protect from software piracy,
software manufacturers should ..
○ issue users license agreement,
■ the right to use the software
● (single user license/end-user license agreement)
58

7. Human Aspect : Awareness
previous CS015 Computer Security Risk slideshow
● expose employees or staff to computer security
through continuously security training, courses.
● make a systematic routine check to update
(security patches, virus definition,other malicious
code) a computer system - early preventing a
threat/risks.
● proper handling of computer and information
59

How
to safeguards a computer from ..
Unauthorized Access and Use
60

Safeguards against Unauthorized Access and Use
● organizations should use access control to minimize the
chance of a perpetrator intentionally accessing confidential
information on a computer.
● Access control - a security measure that defines who can
access computer, what actions they can take while accessing
the computer.
● Two-phases process in implementing access-control is ;
○ identification ,
■ process to verifies the validity of a user.
○ authentication
■ process to verifies the individual is the person he or she claims to be.
61

Safeguards against Unauthorized Access and Use
● Identification and Authentication Methods
○ user name
○ password
● User name or user ID (identification), is a unique
combination of characters (alphanumeric) that identifies one
specific user.
● Password, private combination of characters associated with
the user name that allow access to certain computer
resources.
62

4.1.2 area 2016

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to 4.1.2 area 2016

Similar to 4.1.2 area 2016 (20)

Recently uploaded

Recently uploaded (20)

4.1.2 area 2016