Presentation is loading. Please wait.

Presentation is loading. Please wait.

SECURITY & ETHICAL CHALLENGES

Published byDominic Gallagher Modified over 6 years ago

Similar presentations

Presentation on theme: "SECURITY & ETHICAL CHALLENGES"— Presentation transcript:

1 SECURITY & ETHICAL CHALLENGES
Module 7: SECURITY & ETHICAL CHALLENGES TKF Aplikasi Komputer II 11-1

2 TKF 2263 Aplikasi Komputer II
Objectives Overview Identify several ethical issues in how the use of information technologies in e-business affects employment, individuality, working conditions, privacy, crime, health, and solutions to societal problems. Identify several types of security management strategies and defenses, and explain how they can be used to ensure the security of e-business applications. Propose several ways that business managers and professionals can help to lessen the harmful effects and increase the beneficial effects of the use of information technology. TKF Aplikasi Komputer II

3 IT Security, Ethics and Society
IT Security, Ethics and Society Information Technology has had both beneficial and detrimental effects on each of these areas. TKF Aplikasi Komputer II 11-3

4 Ethical Responsibility
Ethical Responsibility Business professionals have a responsibility to promote ethical uses of information technology in the workplace. TKF Aplikasi Komputer II 11-4

5 TKF 2263 Aplikasi Komputer II
Business Ethics Questions that managers must confront as part of their daily business decision making including: Equity Rights Honesty Exercise of Corporate Power TKF Aplikasi Komputer II 11-5

6 Ethical Business Issues Categories
Ethical Business Issues Categories TKF Aplikasi Komputer II 11-6

7 Corporate Social Responsibility Theories
Corporate Social Responsibility Theories Stockholder Theory Managers are agents of the stockholders Their only ethical responsibility is to increase the profits of the business Without violating the law or engaging in fraudulent practices Social Contract Theory Companies have ethical responsibilities to all members of society Which allow corporations to exist based on a social contract TKF Aplikasi Komputer II 11-7

8 Corporate Social Responsibility Theories
Corporate Social Responsibility Theories Stakeholder Theory Managers have an ethical responsibility to manage a firm for the benefit of all its stakeholders Stakeholders are all individuals and groups that have a stake in, or claim on, a company TKF Aplikasi Komputer II 11-8

9 Principles of Technology Ethics
Principles of Technology Ethics Proportionality – the good achieved by the technology must outweigh the harm or risk Informed Consent – those affected by the technology should understand and accept the risks Justice – the benefits and burdens of the technology should be distributed fairly Minimized Risk – even if judged acceptable by the other three guidelines, the technology must be implemented so as to avoid all unnecessary risk TKF Aplikasi Komputer II 11-9

10 AITP Standards of Professional Conduct
AITP Standards of Professional Conduct TKF Aplikasi Komputer II 11-10

11 Responsible Professional Guidelines
Responsible Professional Guidelines Acting with integrity Increasing your professional competence Setting high standards of personal performance Accepting responsibility for your work Advancing the health, privacy, and general welfare of the public TKF Aplikasi Komputer II 11-11

12 TKF 2263 Aplikasi Komputer II
Computer Crime The unauthorized use, access, modification, and destruction of hardware, software, data, or network resources The unauthorized release of information The unauthorized copying of software Denying an end user access to his or her own hardware, software, data, or network resources Using or conspiring to use computer or network resources illegally to obtain information or tangible property TKF Aplikasi Komputer II 11-12

13 How large companies protect themselves from cybercrime
How large companies protect themselves from cybercrime TKF Aplikasi Komputer II 11-13

14 TKF 2263 Aplikasi Komputer II
Hacking The obsessive use of computers, Or the unauthorized access and use of networked computer systems TKF Aplikasi Komputer II 11-14

15 Common Hacking Tactics
Common Hacking Tactics Denial of Service Hammering a website’s equipment with too many requests for information Clogging the system, slowing performance or even crashing the site Scans Widespread probes of the Internet to determine types of computers, services, and connections Looking for weaknesses TKF Aplikasi Komputer II 11-15

16 Common Hacking Tactics
Common Hacking Tactics Sniffer Programs that search individual packets of data as they pass through the Internet Capturing passwords or entire contents Spoofing Faking an address or Web page to trick users into passing along critical information like passwords or credit card numbers TKF Aplikasi Komputer II 11-16

17 Common Hacking Tactics
Common Hacking Tactics Trojan Horse A program that, unknown to the user, contains instructions that exploit a known vulnerability in some software Back Doors A hidden point of entry to be used in case the original entry point has been detected or blocked Malicious Applets Tiny Java programs that misuse your computer’s resources, modify files on the hard disk, send fake , or steal passwords TKF Aplikasi Komputer II 11-17

18 Common Hacking Tactics
Common Hacking Tactics War Dialing Programs that automatically dial thousands of telephone numbers in search of a way in through a modem connection Logic Bombs An instruction in a computer program that triggers a malicious act Buffer Overflow A technique for crashing or gaining control of a computer by sending too much data to the buffer in a computer’s memory TKF Aplikasi Komputer II 11-18

19 Common Hacking Tactics
Common Hacking Tactics Password Crackers Software that can guess passwords Social Engineering Gaining access to computer systems By talking unsuspecting company employees out of valuable information such as passwords Dumpster Diving Sifting through a company’s garbage to find information to help break into their computers TKF Aplikasi Komputer II 11-19

20 TKF 2263 Aplikasi Komputer II
Cyber Theft Computer crime involving the theft of money Often inside jobs Or use Internet to break in TKF Aplikasi Komputer II 11-20

21 Unauthorized Use at Work
Unauthorized Use at Work Time and resource theft May range from doing private consulting or personal finances, or playing video games, to unauthorized use of the Internet on company networks TKF Aplikasi Komputer II 11-21

22 Internet Abuses in the Workplace
Internet Abuses in the Workplace General abuses Unauthorized usage and access Copyright infringement/plagiarism Newsgroup postings Transmission of confidential data Pornography – accessing sexually explicit sites Hacking Non-work related download or upload Leisure use of the Internet Usage of external ISPs Moonlighting 90% of US employees admit to surfing recreational sites during office hours 84% say they send personal Some offenses will get you fired such as sending offensive or excessive surfing TKF Aplikasi Komputer II 11-22

23 TKF 2263 Aplikasi Komputer II
Software Piracy Software Piracy Unauthorized copying of computer programs Licensing Purchase of software is really a payment for a license for fair use Site license allow a certain number of copies A third of the software industry’s revenues are lost due to piracy TKF Aplikasi Komputer II 11-23

24 Theft of Intellectual Property
Theft of Intellectual Property Intellectual property Copyrighted material such as Music, videos, images, articles, books, software Copyright infringement is illegal Peer-to-peer networking techniques have made it easy to trade pirated intellectual property TKF Aplikasi Komputer II 11-24

25 TKF 2263 Aplikasi Komputer II
Viruses and Worms Virus and worms copy annoying or destructive routines into networked computers Often spread via or file attachments Computer Virus Program code that cannot work without being inserted into another program Worm Distinct program that can run unaided Virus and worm are often used as synonyms TKF Aplikasi Komputer II 11-25

26 Cost of viruses and worms
Cost of viruses and worms Nearly 115 million computers were infected in 2004 As many as 11 million computers are believed to be permanently infected Total economic damage estimated to be between $166 and $292 billion in 2004 Average damage per installed Windows-based machine is between $277 and $366 TKF Aplikasi Komputer II 11-26

27 TKF 2263 Aplikasi Komputer II
Adware and Spyware Adware Software that purports to serve a useful purpose But also allows Internet advertisers to display advertisements (pop-up and banner ads) Without the consent of the computer’s user Spyware Adware that employs the user’s Internet connection in the background without your permission or knowledge Captures information about you and sends it over the Internet Adware is not illegal Spyware can “hijack” your browser changing your homepage and directing your browsing TKF Aplikasi Komputer II 11-27

28 Privacy: Opt-in versus Opt-out
Privacy: Opt-in versus Opt-out Opt-in You explicitly consent to allow data to be compiled about them Law in Europe Opt-out Data can be compiled about you unless you specifically request it not be Default in the US TKF Aplikasi Komputer II 11-28

29 TKF 2263 Aplikasi Komputer II
Privacy Issues Violation of Privacy: Accessing individuals’ private conversations and computer records, Collecting and sharing information about individuals gained from their visits to Internet websites Computer Monitoring: Always knowing where a person is, especially as mobile and paging services become more closely associated with people rather than places TKF Aplikasi Komputer II 11-29

30 TKF 2263 Aplikasi Komputer II
Privacy Issues … Computer Matching Using customer information gained from many sources to market additional business services Unauthorized Personal Files Collecting telephone numbers, addresses, credit card numbers, and other personal information to build individual customer profiles TKF Aplikasi Komputer II 11-30

31 Protecting your Privacy on the Internet
Protecting your Privacy on the Internet can be encrypted Newsgroup postings can be sent through anonymous r ers ISP can be asked not to sell your name and personal information to mailing list providers and other marketers Decline to reveal personal data and interests on online service and website user profiles TKF Aplikasi Komputer II 11-31

32 TKF 2263 Aplikasi Komputer II
Privacy Laws Rules that regulate the collection and use of personal data by businesses and the government TKF Aplikasi Komputer II 11-32

33 TKF 2263 Aplikasi Komputer II
Censorship Issues Spamming Indiscriminate sending of unsolicited messages to many Internet users Flaming Sending extremely critical, derogatory, and often vulgar messages or newsgroup postings to other users on the Internet or online services TKF Aplikasi Komputer II 11-33

34 TKF 2263 Aplikasi Komputer II
Cyberlaw Laws intended to regulate activities over the Internet or via electronic data communications TKF Aplikasi Komputer II 11-34

35 TKF 2263 Aplikasi Komputer II
Other Challenges Employment IT creates new jobs and increases productivity But can also cause significant reductions in job opportunities as well as different types of skills required for new jobs Computer Monitoring Computers used to monitor the productivity and behavior of employees as they work TKF Aplikasi Komputer II 11-35

36 TKF 2263 Aplikasi Komputer II
Other Challenges Working Conditions IT has eliminated monotonous or obnoxious tasks But some jobs requiring a skilled craftsman have been replaced by jobs requiring routine, repetitive tasks or standby roles Individuality Dehumanize and depersonalize activities because computers eliminate human relationships Systems without flexibility TKF Aplikasi Komputer II 11-36

37 TKF 2263 Aplikasi Komputer II
Health Issues Cumulative Trauma Disorders (CTDs) Disorders suffered by people who sit at a PC or terminal and do fast-paced repetitive keystroke jobs Carpal Tunnel Syndrome Painful crippling ailment of the hand and wrist TKF Aplikasi Komputer II 11-37

38 TKF 2263 Aplikasi Komputer II
Ergonomics Designing healthy work environments That are safe, comfortable, and pleasant for people to work in Thus increasing employee morale and productivity TKF Aplikasi Komputer II 11-38

39 TKF 2263 Aplikasi Komputer II
Ergonomic Factors TKF Aplikasi Komputer II 11-39

40 TKF 2263 Aplikasi Komputer II
Security Management The goal of security management is the accuracy, integrity, and safety of all information system processes and resources. TKF Aplikasi Komputer II 11-40

41 Internetworked Security Defenses
Internetworked Security Defenses Encryption Data transmitted in scrambled form and unscrambled by computer systems for authorized users only TKF Aplikasi Komputer II 11-41

42 Public/Private Key Encryption
Public/Private Key Encryption Encryption products: RSA and PGP (Pretty Good Privacy) Other products included in software such as Windows XP, Novell Netware and Lotus Notes TKF Aplikasi Komputer II 11-42

43 Internetworked Security Defenses
Internetworked Security Defenses Firewalls A gatekeeper system that protects a company’s intranets and other computer networks from intrusion By providing a filter and safe transfer point for access to and from the Internet and other networks Firewalls are also important for individuals who connect to the Internet with DSL or cable modems Firewalls deter but cannot completely prevent unauthorized hacking TKF Aplikasi Komputer II 11-43

44 Internet and Intranet Firewalls
Internet and Intranet Firewalls TKF Aplikasi Komputer II 11-44

45 How to Defend Against Denial of Service Attacks
How to Defend Against Denial of Service Attacks At the zombie machines (computers commandeered by cyber criminals) Set and enforce security policies Scan for vulnerabilities At the ISP Monitor and block traffic spikes At the victim’s website Create backup servers and network connections TKF Aplikasi Komputer II 11-45

46 Internetworked Security Defenses
Internetworked Security Defenses Monitoring Use of content monitoring software that scans for troublesome words that might compromise corporate security Virus Defenses Centralize the distribution and updating of antivirus software Use security suite that integrates virus protection with firewalls, Web security, and content blocking features TKF Aplikasi Komputer II 11-46

47 Other Security Measures
Other Security Measures Security Codes Multilevel password system Encrypted passwords Smart cards with microprocessors Backup Files Duplicate files of data or programs System Security Monitors Programs that monitor the use of computer systems and networks and protects them from unauthorized use, fraud, and destruction TKF Aplikasi Komputer II 11-47

48 TKF 2263 Aplikasi Komputer II
Biometrics Computer devices that measure physical traits that make each individual unique Examples: Voice verification Fingerprints Retina scan TKF Aplikasi Komputer II 11-48

49 Computer Failure Controls
Computer Failure Controls Prevent computer failure or minimize its effects Preventative maintenance Arrange backups with a disaster recovery organization TKF Aplikasi Komputer II 11-49

50 Fault Tolerant Systems
Fault Tolerant Systems Systems that have redundant processors, peripherals, and software that provide a: Fail-over capability to back up components in the event of system failure Fail-safe capability where the computer system continues to operate at the same level even if there is a major hardware or software failure Fail-soft capability where the computer system continues to operate at a reduced but acceptable level in the event of system failure TKF Aplikasi Komputer II 11-50

51 Disaster Recovery Plan
Disaster Recovery Plan Formalized procedures to follow in the event a disaster occurs including: Which employees will participate What their duties will be What hardware, software, and facilities will be used Priority of applications that will be processed Use of alternative facilities Offsite storage of an organization’s databases TKF Aplikasi Komputer II 11-51

52 Information Systems Controls
Information Systems Controls Methods and devices that attempt to ensure the accuracy, validity, and propriety of information system activities TKF Aplikasi Komputer II 11-52

53 TKF 2263 Aplikasi Komputer II
Auditing IT Security IT security audits By internal or external auditors Review and evaluate whether proper and adequate security measures and management policies have been developed and implemented TKF Aplikasi Komputer II 11-53

54 How to protect yourself from cybercrime
How to protect yourself from cybercrime TKF Aplikasi Komputer II 11-54

Download ppt "SECURITY & ETHICAL CHALLENGES"

Similar presentations

McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.

McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.
Crime and Security in the Networked Economy Part 4.

Crime and Security in the Networked Economy Part 4.
1 Topic 1 – Lesson 3 Network Attacks Summary. 2 Questions ► Compare passive attacks and active attacks ► How do packet sniffers work? How to mitigate?

1 Topic 1 – Lesson 3 Network Attacks Summary. 2 Questions ► Compare passive attacks and active attacks ► How do packet sniffers work? How to mitigate?
Security, Privacy, and Ethics Online Computer Crimes.

Security, Privacy, and Ethics Online Computer Crimes.
Security and Ethical Challenges

Security and Ethical Challenges
MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 Hossein BIDGOLI Phishing Email that bites Paying for Privacy Pirates.

MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 Hossein BIDGOLI Phishing that bites Paying for Privacy Pirates.
McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.

McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.
Sixth Edition 1 M a n a g e m e n t I n f o r m a t i o n S y s t e m s M a n a g I n g I n f o r m a t i o n T e c h n o l o g y i n t h e E – B u s i.

Sixth Edition 1 M a n a g e m e n t I n f o r m a t i o n S y s t e m s M a n a g I n g I n f o r m a t i o n T e c h n o l o g y i n t h e E – B u s i.
1 McGraw-Hill/Irwin Copyright © 2004, The McGraw-Hill Companies, Inc. All rights reserved. Ethical Challenges Ethics Principles of right and wrong that.

1 McGraw-Hill/Irwin Copyright © 2004, The McGraw-Hill Companies, Inc. All rights reserved. Ethical Challenges Ethics Principles of right and wrong that.
McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.

McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.
1010 CHAPTER PRIVACY AND SECURITY. © 2005 The McGraw-Hill Companies, Inc. All Rights Reserved. 10-2 Competencies Describe concerns associated with computer.

1010 CHAPTER PRIVACY AND SECURITY. © 2005 The McGraw-Hill Companies, Inc. All Rights Reserved Competencies Describe concerns associated with computer.
Fifth Edition 1 M a n a g e m e n t I n f o r m a t i o n S y s t e m s M a n a g I n g I n f o r m a t i o n T e c h n o l o g y i n t h e E – B u s i.

Fifth Edition 1 M a n a g e m e n t I n f o r m a t i o n S y s t e m s M a n a g I n g I n f o r m a t i o n T e c h n o l o g y i n t h e E – B u s i.
Security and Ethical Challenges

Security and Ethical Challenges
Eleventh Edition 1 Introduction to Information Systems Essentials for the Internetworked E-Business Enterprise Irwin/McGraw-Hill Copyright © 2002, The.

Eleventh Edition 1 Introduction to Information Systems Essentials for the Internetworked E-Business Enterprise Irwin/McGraw-Hill Copyright © 2002, The.
MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 LO1 Describe information technologies that could be used in computer.

MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 LO1 Describe information technologies that could be used in computer.
1 Tonga Institute of Higher Education IT 245 Management Information Systems Lecture 11 Security, and Ethical Challenges of E- Business.

1 Tonga Institute of Higher Education IT 245 Management Information Systems Lecture 11 Security, and Ethical Challenges of E- Business.
Chapter 13 Security and Ethical Challenges

Chapter 13 Security and Ethical Challenges
McGraw-Hill/Irwin ©2008,The McGraw-Hill Companies, All Rights Reserved Chapter 11 Security and Ethical Challenges.

McGraw-Hill/Irwin ©2008,The McGraw-Hill Companies, All Rights Reserved Chapter 11 Security and Ethical Challenges.
McGraw-Hill/Irwin Copyright © 2007 by The McGraw-Hill Companies, Inc. All rights reserved.

McGraw-Hill/Irwin Copyright © 2007 by The McGraw-Hill Companies, Inc. All rights reserved.
PRELIM TOPICS. IS operations management is concerned with the use of hardware, software, network, and personnel resources in data centers Operational.

PRELIM TOPICS. IS operations management is concerned with the use of hardware, software, network, and personnel resources in data centers Operational.

Similar presentations

Ads by Google