Chapter 9 Personal Technology 9 1 Truth Issues

Chapter 9 Personal Technology 9. 1 Truth Issues: Manipulating Digital Data 9. 2 Security Issues: Threats 9. 3 Security: Safeguarding Computers & Communications 9. 4 Quality-of-Life Issues 9. 5 Economic & Political Issues Mc. Graw-Hill/Irwin © 2007 The Mc. Graw-Hill Companies, Inc. All rights reserved.

Security Issues: Threats o o Errors and accidents Natural hazards Computer crime Computer criminals Is my computer safe? I’m concerned about it. What do I need to do to use it safely for work, home, and school? 2

Security Issues: Threats Errors & Accidents o Human errors n People choose the wrong computer o n Human emotions affect performance o n Too simple or too complex People get frustrated Human perceptions are slower than the equipment o Watch out when you click the OK button! You may have just deleted something important! 3

Security Issues: Threats Errors & Accidents o Procedural errors n o When people fail to follow safe procedures, errors can occur Software errors n n Programmers make coding errors Famous example: Utility billing software: o o o Customer pays early – software credits account Customer pays late – software credits account, adds late fee in for next bill Programmer forgot to consider customers who pay exactly on time – their payments were never credited at all! 4

Security Issues: Threats Errors & Accidents o Electromechanical problems n n n o Dirty data problems n n o Mechanical systems wear out Power failures shut down computers unless you have battery backup Using cellphones and Blackberries while driving can cause people to crash Incomplete, updated, or inaccurate data Check your records – medical, school, and credit to make sure they are accurate Natural hazards can lead to disasters 5

Security Issues: Threats Computer Crimes o Two types of computer crime n n It can be an illegal act perpetrated against computers or telecommunications It can be the use of computers or telecommunications to accomplish an illegal act 6

Security Issues: Threats Computer Crimes o o o o Theft of hardware Theft of software Theft of online music and videos Theft of time and services Theft of information Internet-related fraud Crimes of malice Computer criminals 7

Security: Safeguarding Computers & Communications o Security is n o A system of safeguards for protecting information technology against disasters, system failures, and unauthorized access that can result in damage or loss Computer Security’s Five Components n n n Deterrence of computer crime Identification and access Encryption Protection of software and data Disaster recovery plans 17

Security: Safeguarding Computers & Communications o Deterrents to computer crime n n Enforcing laws CERT: The Computer Emergency Response Team o o Provides round-the-clock information on international computer security threats The CERT website is www. cert. org n n For example, on December 15, 2005 announced a partnership between the US and ict. Qatar, the Qatar Supreme Council for Information and Communications Technology, to conduct and coordinate cybersecurity activities On December 13, 2005 CERT issued alert SA 05 -347 A documenting Windows Explorer vulnerabilities 18

Security: Safeguarding Computers & Communications o More deterrents to computer crimes n Tools to fight fraudulent and unauthorized online uses o o o n Rule-based detection software Predictive-statistical-model software Employee internet management software Internet filtering software Electronic surveillance Verify legitimate right of access o o o Use cards, keys, signatures, and badges Use PINs and passwords Use physical traits and personal identification 19

Security: Safeguarding Computers & Communications o Encryption n n The process of altering readable data into unreadable form to prevent unauthorized access Advantage: encrypting data that is available over the internet keeps thieves and crackers from reading it o n On Dec. 7, 2005, Guidance Software, a maker of Computer Forensics software, informed their customers that criminals had stolen their credit cards because Guidance had FAILED to encrypt a database that was accessible over the internet Disadvantage: encrypting data may prevent lawenforcement officials from reading the data criminals are sending to each other 20

Security: Safeguarding Computers & Communications o 4 ways to protect software & data n n Educate employees in backing up data, virus protection, and not sharing passwords Control of access to restrict usage Audit controls to document who used what programs and computers and when People controls include screening applicants, background checks, monitoring internet, email, and computer usage 21

Security: Safeguarding Computers & Communications o Disaster-recovery plans n A method of restoring information-processing operations that have been halted by destruction or accident o o n Reinforced by 2001 World Trade Center attack Reinforced by company data losses incurred during 2005 Hurricane Katrina Plans range in price and complexity from o o More $$$ Backing up data from disk to tape, CD, or zip disk, with a UPS Automatically storing data redundantly in two places, with a generator Having an off-site computerized data storage center with independent power supply Having a complete “hot” redundant data center that can instantly be used if there is a disaster 22