Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved.

McGraw-Hill Technology Education Chapter 14A Understanding the Need for Security Measures

14A-3 Basic Security Concepts Threats –Anything that can harm a computer –Vulnerabilities are weaknesses in security –Security attempts to neutralize threats

14A-4 Basic Security Concepts Degrees of harm –Level of potential damage –Include all parts of system Potential data loss Loss of privacy Inability to use hardware Inability to use software

14A-5 Basic Security Concepts Countermeasures –Steps taken to block a threat –Protect the data from theft –Protect the system from theft

14A-6 Threats To Users Identity Theft –Impersonation by private information Thief can ‘become’ the victim –Reported incidents rising –Methods of stealing information Shoulder surfing Snagging Dumpster diving Social engineering High-tech methods

14A-7 Threats To Users Loss of privacy –Personal information is stored electronically –Purchases are stored in a database Data is sold to other companies –Public records on the Internet –Internet use is monitored and logged –None of these techniques are illegal

14A-8 Threats to Users Cookies –Files delivered from a web site –Originally improved a site’s function –Cookies now track history and passwords –Browsers include cookie blocking tools

14A-9 Threats to Users Spyware –Software downloaded to a computer –Designed to record personal information –Typically undesired software –Hides from users –Several programs exist to eliminate

14A-10 Threats to Users Web bugs –Small programs embedded in gif images –Gets around cookie blocking tools –Companies use to track usage –Blocked with spyware killers

14A-11 Threats to Users Spam –Unsolicited commercial –Networks and PCs need a spam blocker Stop spam before reaching the inbox –Spammers acquire addresses using many methods –CAN-SPAM Act passed in 2003

14A-12 Threats to Hardware Affect the operation or reliability Power-related threats –Power fluctuations Power spikes or browns out –Power loss –Countermeasures Surge suppressors Line conditioners Uninterruptible power supplies Generators

14A-13 Threats to Hardware Theft and vandalism –Thieves steal the entire computer –Accidental or intentional damage –Countermeasures Keep the PC in a secure area Lock the computer to a desk Do not eat near the computer Watch equipment Chase away loiterers Handle equipment with care

14A-14 Threats to Hardware Natural disasters –Disasters differ by location –Typically result in total loss –Disaster planning Plan for recovery List potential disasters Plan for all eventualities Practice all plans

14A-15 Threats to Data The most serious threat –Data is the reason for computers –Data is very difficult to replace –Protection is difficult Data is intangible

14A-16 Threats to Data Viruses –Software that distributes and installs itself –Ranges from annoying to catastrophic –Countermeasures Anti-virus software Popup blockers Do not open unknown

14A-17 Threats to Data Trojan horses –Program that poses as beneficial software –User willingly installs the software –Countermeasures Anti-virus software Spyware blocker

14A-18 Threats to Data Cybercrime –Using a computer in an illegal act –Fraud and theft are common acts

14A-19 Threats to Data Internet fraud –Most common cybercrime –Fraudulent website –Have names similar to legitimate sites

14A-20 Threats to Data Hacking –Using a computer to enter another network –Cost users $1.3 trillion in 2003 –Hackers motivation Recreational hacking Financial hackers Grudge hacking –Hacking methods Sniffing Social engineering Spoofing

14A-21 Threats to Data Distributed denial of service attack –Attempt to stop a public server –Hackers plant the code on computers –Code is simultaneously launched –Too many requests stops the server

14A-22 Threats to Data Cyber terrorism –Attacks made at a nations information –Targets include power plants –Threat first realized in 1996 –Organizations combat cyber terrorism Computer Emergency Response Team (CERT) Department of Homeland Security

Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Chapter 14A End of Chapter

Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved.

McGraw-Hill Technology Education Chapter 14B Taking Protective Measures

14B-26 Avoiding Identity Theft Guard your papers –Shred unneeded papers –Pick up you mail quickly –Check statements immediately –Keep records for 3 years

14B-27 Avoiding Identity Theft Guard your personal information –Be wary giving out information –Avoid giving account numbers –Never give personal information in –Ensure online shopping is secure

14B-28 Avoiding Identity Theft Look at the big picture –Review your credit report yearly –Develop an efficient filing system –Know your liability limits

14B-29 Protecting Your Privacy Keep marketers at bay –Be wary filling out forms –Guard your primary address Have a ‘spam account’ for forms

14B-30 Protecting Your Privacy Know your legal rights –1966 Freedom of Information Act –1970 Fair Credit Reporting Act –Privacy Act of 1974 –1986 Electronic Communications Act –Financial Modernization Act of 1999 –2001 USA Patriot Act

14B-31 Managing Cookies and Spyware Dealing with cookies –Browsers provide settings to block cookies –No cookies to all cookies allowed –Without cookies some sites crash –Cookies can be deleted Browsers Spyware programs

14B-32 Managing Cookies and Spyware Cookie types –Session cookies Cookies for the current site –Persistent cookies Stored on hard drive until deleted –First-party cookies Installed by the current site –Third-party cookies Installed by an ad

14B-33 Deleting Cookies

14B-34 Managing Cookies and Spyware Removing web bugs and spyware –Install a spyware removal program None are 100% effective, use two –Install a pop-up blocker Are extremely effective

14B-35 Managing Cookies and Spyware Evading spam –Contact your ISP –Use mail program’s filters –Use an anti-spam program –Use an online account for purchasing

14B-36 Protection From Malware Viruses and worms –Purchase a good anti-virus product –Keep the product updated –Keep your OS up to date

14B-37 Protecting Your System Limit physical access –Easiest way to harm or steal data –Build an account for each user –Require a password for access Software and hardware password

14B-38 Protecting Your System Use a firewall –Protects from unauthorized remote use –Makes your computer invisible –Cost between $0 and $80

14B-39 Protecting Your System Backup often –Backup is a copy of a file –Restore replaces a file on disk –Organizations backup at least daily –Home users should backup weekly

14B-40 System Events OS generates messages for events Provides clues about computer health Can alert to potential problems Windows includes the Event Viewer

14B-41 Event Viewer

14B-42 Handling Storage Media Store media in the proper container –Floppy disks in a hard case –CD should be in a sleeve –Thumb disks should be closed

14B-43 Handling Storage Media Avoid magnetism –Magnets erase the contents of disks –Magnets found in Speakers Televisions and CRT monitors Radios

14B-44 Handling Storage Media Heat and cold –Avoid extreme temperatures Heat expands media Cold contracts media –Floppies and CD-ROMs are susceptible

14B-45 Handling Storage Media Moisture –Do not use wet media –CDs can be wiped off –Floppy disks must dry for days

14B-46 Handling Storage Media Dust, dirt, and fingerprints –Dirty or scratched media will fail –Handle media by the edge –Clean CDs with gentle strokes

14B-47 Storing Computer Equipment Never store near large electronics Store in dry, climate controlled rooms Plan for natural disasters Stack equipment safely

14B-48 Keeping Your Computer Clean Computers should be spotless Avoid eating or smoking at computer Clean the dust from inside the system Change the filters if present

Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Chapter 14B End of Chapter