信息时代的管理信息系统Chap008.pptx

Chapter 8Protecting People and Information:Threats and SafeguardsCopyright 2010 by the McGraw-Hill Companies,Inc.All rights reserved.McGraw-Hill/IrwinSTUDENT LEARNING OUTCOMES1.Define ethics and describe the two factors that affect how you make a decision concerning an ethical issue.2.Define and describe intellectual property,copyright,Fair Use Doctrine,and pirated software.3.Describe privacy and describe ways in which it can be threatened.4.Describe the ways in which information on your computer or network is vulnerable and list measures you can take to protect it.8-2SHE LOST$400,000 TO AN E-MAIL SCAM“419”e-mails are a popular type of scam419 scams promise you,in an e-mail,that you will get rich if you ante up a small feeJanella Spears took the bait and spent$400,000 trying to collect her fortuneShe even cashed in her husbands retirement to get the money to send the crooks8-3Case Study Questions1.What do you think about this true story?2.Have you ever been caught in a scam?How did you feel when you discovered that you had been fooled?3.What would you do if you knew that your parent was being complicity in his or her own victimization?8-4INTRODUCTIONHandling information responsibly means understanding the following issuesEthicsPersonal privacyThreats to informationProtection of information8-5CHAPTER ORGANIZATION1.EthicsLearning Outcomes#1.PrivacyLearning Outcome#33.SecurityLearning Outcome#48-6ETHICSEthics the principles and standards that guide our behavior toward other peopleEthics are rooted in history,culture,and religion8-7Factors the Determine How You Decide Ethical IssuesActions in ethical dilemmas determined byYour basic ethical structureThe circumstances of the situationYour basic ethical structure determines what you consider to beMinor ethical violationsSerious ethical violationsVery serious ethical violations8-8Basic Ethical Structure8-9Circumstances of the Situation1.Consequences of the action or inaction2.Societys opinion of the action or inaction3.Likelihood of effect of action or inaction4.Time to consequences of action or inaction5.Relatedness of people who will be affected by action or inaction6.Reach of result of action or inaction8-10Intellectual PropertyIntellectual property intangible creative work that is embodied in physical formCopyright legal protection afforded an expression of an ideaFair Use Doctrine may use copyrighted material in certain situations8-11Intellectual PropertyUsing copyrighted software without permission violates copyright lawPirated software the unauthorized use,duplication,distribution,or sale of copyrighted software8-12PRIVACYPrivacy the right to left alone when you want to be,to have control over your own personal possessions,and not to be observed without your consentDimensions of privacyPsychological:to have a sense of controlLegal:to be able to protect yourself8-13Privacy and Other IndividualsKey logger(key trapper)software a program that,when installed on a computer,records every keystroke and mouse clickScreen capture programs capture screen from video cardE-mail is stored on many computers as it travels from sender to recipientHardware key logger hardware device that captures keystrokes moving between keyboard and motherboard.Event Data Recorders(EDR)located in the airbag control module and collects data from your car as you are driving.8-14An E-Mail is Stored on Many Computers8-15Identity TheftIdentity theft the forging of someones identity for the purpose of fraud8-16Identity TheftPhishing(carding,brand spoofing)a technique to gain personal information for the purpose of identity theftNEVERReply without question to an e-mail asking for personal informationClick directly on a Web site provided in such an e-mail8-17Identity Theft8-18PharmingPharming-rerouting your request for a legitimate Web site sending it to a slightly different Web addressor by redirecting you after you are already on the legitimate sitePharming is accomplished by gaining access to the giant databases that Internet providers use to route Web traffic.It often works because its hard to spot the tiny difference in the Web site address.8-19Privacy and EmployeesCompanies need information about their employees to run their business effectivelyAs of March 2005,60%of employers monitored employee e-mails70%of Web traffic occurs during work hours78%of employers reported abuse60%employees admitted abuse8-20Privacy and EmployeesVisiting inappropriate sitesGaming,chatting,stock trading,social networking,etc.8-21Reasons for MonitoringHire the best people possibleEnsure appropriate behavior on the jobAvoid litigation for employee misconduct8-22Privacy and ConsumersConsumers want businesses toKnow who they are,but not to know too muchProvide what they want,but not gather information on themLet them know about products,but not pester them with advertising8-23CookiesCookie a small file that contains information about you and your Web activities,which a Web site places on your computerHandle cookies by usingWeb browser cookie management optionBuy a program that manages cookies8-24SpamSpam unsolicited e-mail from businesses advertising goods and servicesGets past spam filters by Inserting extra charactersInserting HTML tags that do nothingReplying usually increases,rather than decreases,amount of spam8-25Adware and SpywareAdware software to generate ads that installs itself when you download another programSpyware(sneakware,stealthware)software that comes hidden in downloaded software and helps itself to your computer resources8-26Adware in Free Version of Eudora8-27Trojan Horse SoftwareTrojan horse software software you dont want inside software you do wantSome ways to detect Trojan horse softwareAdAware at www.lavasoftUSA.com The Cleaner at Trojan First Aid Kit(TFAK)Check it out before you download at 8-28Web LogsWeb log one line of information for every visitor to a Web siteClickstream records information about you during a Web surfing session such as what Web sites you visited,how long you were there,what ads you looked at,and what you bought.Anonymous Web browsing(AWB)hides your identity from the Web sites you visitThe Anonymizer at SuftSecret at 8-29Privacy and Government AgenciesAbout 2,000 government agencies have databases with information on peopleGovernment agencies need information to operate effectivelyWhenever you are in contact with government agency,you leave behind information about yourself8-30Government Agencies Storing Personal InformationLaw enforcementNCIC(National Crime Information Center)FBIElectronic SurveillanceCarnivore or DCS-1000Magic Lantern(software key logger)NSA(National Security Agency)Echelon collect electronic information by satellite8-31Government Agencies Storing Personal InformationIRSCensus BureauStudent loan servicesFICASocial Security AdministrationSocial service agenciesDepartment of Motor Vehicles8-32Laws on PrivacyHealth Insurance Portability and Accountability Act(HIPAA)protects personal health informationFinancial Services Modernization Act requires that financial institutions protect personal customer informationOther laws in Figure 8.6 on page 2448-33SECURITY AND EMPLOYEESAttacks on information and computer resources come from inside and outside the companyComputer sabotage costs about$10 billion per yearIn general,employee misconduct is more costly than assaults from outside8-34Security and Employees8-35Security and Outside ThreatsHackers knowledgeable computer users who use their knowledge to invade other peoples computersComputer virus(virus)software that is written with malicious intent to cause annoyance or damageWorm type of virus that spreads itself from computer to computer usually via e-mailDenial-of-service(DoS)attack floods a Web site with so many requests for service that it slows down or crashes8-36Computer Viruses CantHurt your hardwareEx:Monitors,printers,processors,etc.Hurt any files they werent designed to attackEx:A worm designed to attack Outlook wont attack other e-mail programsInfect files on write-protected media8-37Security Measures1.Anti-virus software detects and removes or quarantines computer viruses2.Anti-spyware and anti-adware software3.Spam protection software identifies and marks and/or deletes Spam4.Anti-phishing software lets you know when phishing attempts are being made5.Firewall hardware and/or software that protects a computer or network from intruders8-38Security Measures5.Anti-rootkit software stops outsiders taking control of your machine6.Encryption scrambles the contents of a file so that you cant read it without the decryption key7.Public Key Encryption(PKE)an encryption system with two keys:a public for everyone and a private one for the recipient8.Biometrics the use of physiological characteristics for identification purposes8-39