1. Information Security CIS 9002 Kannan Mohan Department of CIS
Zicklin School of Business, Baruch College

2. Learning Objectives
Examine the various security threats posed by IT and solutions that can be used to address these threats

3. Information Security - Threats
Network Infiltration at TJX
Breach at Target
Lessons
Security as organizational priority
Blend of technical and personnel issues

5. Sources of Vulnerabilities
Insiders
Social engineering
Phishing
Passwords

6. Technology Threats Viruses Worms Trojans Adware Spyware Keylogger
Denial of Service Attacks

7. Solutions
Firewalls
Intrusion detection
Updates
Encryption

8. Public Key Encryption
(Laudon and Laudon, 2009)

9. Digital Certificates
(Laudon and Laudon, 2009)