Chapter 4 Computer Ethics and Security

4.0 Computer Ethics And Security
Chapter Four
4.1 Computer Ethics
4.1.1 Netiquette
4.1.2 Areas of computer ethics
4.2 Computer Security
4.2.1 Computer Security Risks
4.2.2 Security Measures

4.1 Computer Ethics
4.1.1 Netiquette
Chapter Four
At the end of this topic, students
should be able to:
a) Identify the rules of netiquette

– Netiquette, which is short for Internet etiquette.
• Netiquette is the code of acceptable
behaviors users should follow while on the
Internet; that is, it is the conduct expected
of individuals while online.
– Good netiquette involves respecting other’s
privacy and not doing anything online that will
annoy or frustrate other people
Define Netiquette
3

Netiquette includes rules for all
aspects of the Internet ,including;
• World Wide Web
• E-mail
• Instant Messaging
• Chat Rooms
• File Transfer Protocol
• Newsgroups and Message boards.
4

1. In e-mail, chat rooms, and newsgroups:
NETIQUETTE - Golden Rule: Treat others as
you would like them to treat you.
 Keep messages brief. Use proper grammar, spelling, and
punctuation.
 Be careful when using sarcasm and humor, as it might be
misinterpreted.
 Be polite. Avoid offensive language.
 Read the message before you send it.
 Be clear. Make sure subject lines (e-mail) or page title
(web page) reflects your content
 Avoid sending or posting flames, which are abusive or
insulting messages.
 Do not participate in flame wars, which are exchanges of
flames.
5

 Avoid sending spam, which is the Internet’s version of junk
mail. Spam is an unsolicited e-mail message or newsgroup
posting sent to many recipients or newsgroups at once.
 Do not use all capital letters, which is the equivalent of
SHOUTING!
 Clearly identify a spoiler , which is a message that reveals a
solution to a game or ending to a movie or program
 Use emoticons to express emotion. Popular emoticons
include;
:) Smile :| Indifference :o Surprised
:( Frown : Undecided
 Use abbreviations and acronyms for phrases:
btw - by the way imho - in my humble opinion
fyi - for your information ttfn - ta ta for now
fwiw - for what it’s worth tyvm - thank you very much
6

2. Read the FAQ (frequently asked
questions), if one exists. Many newsgroups
and Web pages have an FAQ.
3. Do not assume material is accurate or up-
to-date. Be forgiving of other’s mistakes.
4. Never read someone’s private e-mail.
7

At the end of this topic, students should be able
to:
b) Define computer ethics
c) Describe areas of computer ethics
Chapter Four
4.1 Computer Ethics
4.1.2 Areas of computer
ethics

What to cover?
1.
2.
3.
4.
5.
Information accuracy
Green computing
Codes of conduct
Information privacy
Intellectual property
9

Define computer ethics
• Computer ethics are
the moral guidelines
that govern the use of
computers and
information systems
Pages 581 – 582
Figure 11-28
Discovering Computers : Chapter 11 310

Areas of computer ethics
1.
2.
3.
4.
5.
Information accuracy
Green computing
Codes of conduct
Information privacy
Intellectual property
411

Areas of computer ethics
1. Information accuracy
Information Accuracy Concerned with assuring
the authenticity and *fidelity of information,
and identifying those responsible for
informational errors that harm people
Information Systems Today (©2006 Prentice Hall)
Not all information on the web is correct
*Fidelity: accuracy; exactness
Pages 581 – 582
Figure 11-28

2. Green Computing
• Green computing involves reducing the electricity
and environmental waste while using a computer
Pages 583 – 584
Figure 11-30
6Discovering Computers : Chapter 11 13

3. Code of conduct
• An IT code of conduct is a written guideline that helps
determine
unethical
whether a specific computer action is ethical or
Page 583
Figure 11-29

4. Information privacy
• Information privacy refers to the right of
individuals and companies to deny or restrict the
collection and use of information about them
Huge databases store data online•
• It is important to safeguard your information
Page 584 8Discovering Computers : Chapter 11 15

Page 584
Figure 11-31

• When you fill out a
form, the merchant that
receives the form
usually enters it into a
database
Many companies today
allow people to specify
whether they want
their personal
information distributed
•
Page 585
Figure 11-32

• A cookie is a small text file that a Web server stores on
your
Web
computer
• sites use cookies for a variety of reasons:
online
advertisements
Pages 585 – 586 11Discovering Computers : Chapter 11
TargetTrack how
often users
visit a site
Assist with
shopping
Store users’
passwords
Allow for
personalization
18

Page 586
Figure 11-33

• Spam is an unsolicited
e-mail message or
newsgroup posting
E-mail filtering blocks
e-mail messages from
designated sources
Anti-spam programs
•
•
attempt to remove
spam before it reaches
your inbox
Page 587
Figure 11-34

• Phishing is a scam in
which a perpetrator sends
an official looking e-mail
message that attempts to
obtain your personal and
financial information
Pharming is a scam
where a perpetrator
attempts to obtain your
personal and financial
information via spoofing
•
Pages 587 - 588
Figure 11-35

5. Intellectual Property
• Intellectual Property (IP) - unique and original works
(i.e ideas,inventions,art,writing,product,logos)
• Intellectual property rights are the rights to which
creators are entitled for their work

Importance of Intellectual Property
The importance of Intellectual Property ;
●
●
to protect the original creation from individuals.
to preserve features and process that make thing work ( inventor will
therefore benefits - get a profit , from their work)
previous CS015 Computer Security Risk slideshow
23

Type of Intellectual Property
A patent is an exclusive right granted for an
invention, which is a product or a process that
provides a new way of doing something, or offers
a new technical solution to a problem.
A trade mark is a sign which distinguishesthe
goods and services of one trader from those of
another. A mark includes words, logos, pictures,
names, letters, numbers or a combination of
these.
A copyright exclusive rights given to author/artist
for their materials (literary works; musical works;
artistic works; films; sound recordings;
broadcasts; and derivative works)
http://www.myipo.gov.my/home
24

to:
a) Define computer security risks
c) Identify types computer security risks
Chapter Four
4.2.1 Computer Security
Risks

What to cover?
1.
2.
3.
4.
5.
6.
Malicious code (virus, worm, Trojan horse)
Unauthorized access
Hardware theft
Software theft
Information theft
System failure
and use
1926

Computer Security Risks
• A computer security risk is any event or action that could
cause a loss of or damage to computer hardware,
software, data, information, or processing capability
• A cybercrime is an online or Internet-based illegal act
Hackers Crackers Script Kiddies Corporate Spies
Unethical
Employees
Cyberextortionists Cyberterrorists
Pages 556 - 557 20Discovering Computers : Chapter 11 27

Types of Computer Security Risks
1.
2.
3.
4.
5.
6.
Malicious code (virus, worm, Trojan horse)
Unauthorized access
Hardware theft
Software theft
Information theft
System failure
and use
2128

1. Malicious code
• Every unprotected computer is susceptible to the first type
computer security risk
Computer viruses, worms, Trojan horses, and rootkits are
classified as malware (short for malicious software).
of
•
• Malware - program that act without user's knowledge and
deliberately alter the computer's operation.
2229

1. Malicious code
Type of Malicious code
Computer
Virus
Affects a
computer
negatively by
altering the
way the
computer
works
Worm Trojan Horse Rootkit
• • Copies itself
repeatedly,
using up
resources
and possibly
shutting
down the
• A malicious
program that
hides within
or looks like
a legitimate
program
• Program that
hides in a
computer
and allows
someone
from a
remote
computer
network
or location
take full
control
to

1. Malicious code
• An infected computer
following symptoms:
has one or more of the
Operating system
runs much slower
than usual
Available memory
is less than
expected
Screen displays
unusual message
or image
Files become
corrupted
Unknown
programs or files
mysteriously
appear
Music or unusual
sound plays
randomly
Programs or files
do not work
properly
Existing programs
and files disappear
Operating system
shuts down
unexpectedly
System properties
change
Operating system
does not start up

1. Malicious code
Page 559
Figure 11-3

1. Malicious code
• Users can take several
precautions to protect
their home and work
computers and mobile
devices from these
malicious infections
Page 560 – 561
Figure 11-7

1. Malicious code
Other Types of Malicious code
• A botnet is a group of compromised computers connected to a
network
– A compromised computer is known as a zombie
A denial of service attack (DoS attack) disrupts computer access
Internet services
– Distributed DoS (DDoS)
A back door is a program or set of instructions in a program that
allow users to bypass security controls
Spoofing is a technique intruders use to make their network or
• to
•
•
Internet transmission appear legitimate

2. Unauthorized Access and Use
Unauthorized access is Unauthorized use is the
the use of a computer
network without
permission
or use of a computer or its
data for unapproved or
possibly illegal activities

• Organizations take
several measures to
help prevent
unauthorized access
and use
–
–
Acceptable use policy
Disable file and printer
sharing
Firewalls–
– Intrusion
software
detection
Page 565
Figure 11-10

• Access controls define who can access a
computer, when they can access it, and what
actions they can take
– Two-phase processes
authentication
User name
Password
Passphrase
CAPTCHA
called identification and
–
–
–
–
Pages 565 – 567
Figure 11-11

• •A possessed object is any
item that you must carry to
gain access to a computer
A biometric device
authenticates a person’s
identity by translating a
personal characteristic into
a digital code that is
compared with a digital
or
–
computer facility
Often are used in
combination with a personal
identification number (PIN) code in a computer
Page 568
Figure 11-14

• Digital forensics is the discovery, collection, and
analysis of evidence found on computers
networks
and
• Many areas use
Law
enforcement
digital forensics
Criminal
prosecutors
Military
intelligence
Information
security
departments
Insurance
agencies
Page 569 32Discovering Computers :Chapter 11 39

3. Hardware Theft and Vandalism
Hardware vandalism
is the act of defacing
or destroying
computer equipment
Hardware theft is the
act of stealing
computer equipment

3. Hardware Theft and Vandalism
• To help reduce the of chances of theft, companies
and schools use a variety of security measures
Cables to lock
equipment
Physical access controls Alarm systems
Real time location
system
Passwords, possessed
Objects (i.e: Matric
cards) , and biometrics
Page 570
Figure 11-15

4. Software Theft
• Software theft occurs when someone:
Steals software
media
Intentionally
erases programs
Illegally
registers and/or
activates a
program
Illegally copies a
program

4. Software Theft
• A single-user license agreement
following conditions:
typically contains the
Permitted to
•
•
•
Install the software on one computer
Make one copy of the software
Remove the software from your computer before giving it away or selling it
Not permitted to
•
•
•
•
Install the software on a network
Give copies to friends or colleagues while continuing to use the software
Export the software
Rent or lease the software

4. Software Theft
• Copying, loaning,
borrowing, renting, or
distributing software
can be a violation of
copyright law
Some software requires
product activation to
function fully
•
Pages 571 – 572
Figure 11-16

5. Information Theft
• Information theft occurs when someone steals personal
or confidential information
Encryption is a process of converting readable data into
unreadable characters to prevent unauthorized access
•
• Decryption is a process of converting from unreadable
characters into readable form of data
Pages 572 - 573
Figure 11-17

Page 573
Figure 11-18

• A digital signature is an encrypted code that a
person, Web site, or organization attaches to an
electronic message to verify the identity of the
sender
– Often used to ensure that an impostor is not
participating in an Internet transaction
• Web browsers
techniques
and Web sites use encryption

• Popular security techniques include
Digital
Certificates
Transport Layer
Security (TLS)
Secure HTTP VPN

Pages 574 - 575
Figures 11-19 – 11-20

6. System Failure
• A system failure is the prolonged malfunction
computer
of a
• A variety of factors can lead
including:
to system failure,
–
–
–
Aging hardware
Natural disasters
Electrical power problems
• Noise, undervoltages, and overvoltages
–
Page 575
Errors in computer programs

6. System Failure
• Two ways to protect from system failures caused
by electrical power variations include surge
protectors
(UPS)
and uninterruptable power supplies
Page 576
Figures 11-21 – 11-22

to:
Identify different ways to overcome security risks
Chapter Four
4.2.2 Security Measures

What to cover?
1.
2.
3.
4.
5.
6.
7.
8.
Data backup
Cryptography
Anti-virus
Anti-spyware
Firewall
Physical access control
Human aspects : awareness,
Related security risks with its measure
4653

How
to safeguards a computer
ALL OF THE ABOVE ?
Common Security Risk ;
#1 Internet & Network Attacks
#2 Unauthorized Access & Use
#3 Theft (Hardware/Software/Information)
#4 System Failure
from ..
Chapter 11 - Manage Computing Securely. Safely and Ethically page 577
54

1. Data backup
• A backup is a duplicate of a file, program, or disk
that can be used if the original is lost, damaged,
or destroyed
– To back up a file means to make a copy of it
separate• Offsite backups are stored
site
in a location
from the computer
Cloud
Storage

How to safeguards from a computer
system failure?
56

● to protect against electrical power
variations, use
■ surge protector (also called surge-
protector)
● uses special electrical components to ;
○ stabilize current flow, and keep out
overvoltage from reaching
computer/electronic equipment.
■ uninterruptable power supply (UPS)
● a device that contains surge protection
circuit and a batteries - that provide
temporary power during loss of power.
57

How
to safeguards a computer
from ..
Hardware,
Theft
Software, Information
58

2. Cryptography
● to protect information on the Internet and
networks, organizations and individuals use a
variety of encryption techniques.
○ encryption - converting readable data (plaintext)
into unreadable characters (ciphertext),
preventing unauthorized access.
○ decryption - converting unreadable data
(ciphertext) to its original state/data (plaintext)
○ the study of encryption and decryption process
(to promote a secure communication) is often
known as a cryptography. 5259

How to safeguards a computer from
viruses?
60

3. Anti virus
● by using any antivirus program, user can safeguards a
computer system from viruses and other malware.
Antivirus program - a program that protects computer
against viruses by identifying and removing any computer
●
viruses found in memory, on
files.
storage media or on incoming
● Popular antivirus program ;
○
○
○
○
○
Kaspersky Anti-Virus
avast! antivirus CA
Anti-Virus McAfee
VirusScan
AVG Anti-Virus
61

4. Firewall
• A firewall is hardware and/or software that
protects a network’s resources from intrusion
Pages 563 - 564
Figure 11-8

Intrusion detection software
•
•
•
•
Analyzes all network traffic
Assesses system vulnerabilities
Identifies any unauthorized intrusions
Notifies network administrators of suspicious
patterns or system breaches
behavior
Honeypot
• Vulnerable computer that is set up to entice an intruder to
break into it
4. Firewall

5. Physical access controls
● using physical access controls such as ;
○ locked doors and windows
installing alarm systems for additional security.
attach physical security devices such as cables that
○ equipment to desk.
●
● lock
○ mobile computer to a stationary object.
57
64

● to protect software media from
being stolen owners should keep ..
○ original software boxes and media in
secure location (i.e media cabinets
with lock).
to protect from software piracy,
software manufacturers should ..
○ issue users license agreement,
●
■ the right to use the software
● (single user license/end-user license agreement)
65
5. Physical access controls

6. Human Aspect : Awareness
● expose employees or staff to computer security
through continuously security training, courses.
make a systematic routine check to update
(security patches, virus definition,other malicious
code) a computer system - early preventing a
threat/risks.
●
● proper handling of computer and information
59
previous CS015 Computer Security Risk slideshow
66

How to safeguards a computer from
Unauthorised access and use
67

Safeguards against Unauthorized Access and Use
● organizations should use access control to minimize the
chance of a perpetrator intentionally accessing confidential
information on a computer.
Access control - a security measure that defines who can
access computer, what actions they can take while accessing
the computer.
Two-phases process in implementing access-control is ;
○ identification ,
●
●
■ process to verifies the validity of a user.
○ authentication
■ process to verifies the individual is the person he or she claims to be.
68

Safeguards against Unauthorized Access and use
● Identification and Authentication Methods
○ user name
○ password
User name or user ID (identification), is a unique
combination of characters (alphanumeric) that identifies
specific user.
●
one
● Password, private combination of characters associated
the user name that allow access to certain computer
resources.
with
69

Security Risk Recommended Security Measure/ steps
Malicious code (Virus, Worm,
Trojan)
Anti-virus
Anti-spyware
Firewall
Human aspect awareness
Unauthorized access and use Physical access control
Hardware theft Physical access awareness
Software theft Physical access awareness
Information theft Cryptography
Physical access control
Anti- virus
Anti-spyware
System failure Data backup
Schedule maintenance
Summary of recommended security measure for various security risk
70

Chapter 4 Computer Ethics and Security

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (13)

Similar to Chapter 4 Computer Ethics and Security

Similar to Chapter 4 Computer Ethics and Security (20)

More from Fizaril Amzari Omar

More from Fizaril Amzari Omar (20)

Recently uploaded

Recently uploaded (20)

Chapter 4 Computer Ethics and Security