CIS105: Computer Applications & Information Systems Lect. 11 ​

Chapter 11: Computer Security ​

Midterm reminder: March 28th - 29th

• Exam Review after Chapter 11KC
• 40 new questions, 10 KC questions
  • Same format as last time

11.1: System Security & Computer Privacy ​

• An unsecured computer is extremely easy to breach by any seasoned hacker
• Computer Security: Concerned with risk management, confidentiality, integrity, and the availability of the electronic info processed and stored within a computing system
• Risk Management: Includes the recognition, consequences, and assessment of risk to a computer's assets, and developing strategies to manage and protect them

11.2: Business System Threats ​

• Intranet: A businesses' private version of the internet
• The key aspect of an intranet is privacy
• Firewall: Hardware and software working together to ensure that only authorized personnel can access the business' intranet

11.3: Firewall ​

• Without a firewall, an intranet is just another part of the internet
• Proxy Server: A special security computer that allows communication to flow in and out of an intranet to check for external threats
• Two standard security practices for firewalls:
  • Default-Deny
  • Default-Allow

11.4: Malware Threats ​

• The term "virus" comes from biology
• Malware Motivations:
  • Experimental Malware
  • Worms
  • Trojan Horses
  • Spyware/Keylogging
  • Adware
  • Spamming
  • Denial-of-Service Attach (DoS)
    • The deadliest
  • Reverse Phishing - "Spear Phishing"

11.5: Malware Solutions ​

• Antivirus Software
  • Norton AntiVirus
  • McAfee's VirusScan
• System patches
• Data Backup
• Employee training

11.6: Internet Fraud ​

• Internet fraud: Any fraudulent activity in an online setting
• Google AdSense, Google's advertising network; the middleman between the advertiser and the website owner
• Click Fraud: a program that automatically clicks on Ads
• Purchase Scam: scammer asks seller to pay for shipping via credit card, cancels credit card after order has shipped
• Most uncomplicated type of internet fraud
• Phishing: Uses social engineering techniques to gain private information

11.7: Computer Privacy ​

• Privacy: The ability of an individual to keep their personal information out of public view
• Anonymous: One's personal identity Is not be known
• Tracking Cookie: A small text file that tracks your interaction on a website
• History files: A list of stored or cached websites on a user's computer

50% of the time an unsecured computer can be hacked, and a password can be guessed

11.8: Identity Theft ​

• Identity theft: A crime concerning the unlawful practice of assuming another individual's identity
• Ways to acquire personal information:
  • Shoulder Surfing
  • Dumpster Diving
• SCAM
  • Stingy
  • Check
  • Ask
  • Maintain
• ASU's Recommended Password Manager: Stache
  • Bitwarden, 1Password, Dashlane, Keeper, KeePass