1. Caring for Technology Malware

2. Malware In this Topic we examine: v Viruses (or Malware) v Virus Detection Techniques v When a Virus is Detected v Updating anti-virus software

3. Have you had a PC virus ? What happened ? How did you fix it ?

4. Computer Security Risks A Computer security risk is… p. 556 Fig. 11-1  An Action that causes loss of or damage to a computer system

5. Computer Viruses, Worms, and Trojan Horses Viruses, worms, and Trojan horses are: p. 558 Virus Virus is a potentially damaging computer program Worm Worm copies itself repeatedly, using up resources and possibly shutting down computer or network Trojan horse Trojan horse hides within or looks like legitimate program until triggered Payload Payload (destructive event) that is delivered when you open file, run infected program, or boot computer with infected disk in disk drive Can spread and damage files Does not replicate itself on other computer s

6. Computer Viruses, Worms, and Trojan Horses How can a virus spread through an e-mail message? p. 559 Fig. 11-2 Step 1. Unscrupulous programmers create a virus program. They hide the virus in a Word document and attach the Word document to an e-mail message. Step 2. They use the Internet to send the e-mail message to thousands of users around the world. Step 3b. Other users do not recognize the name of the sender of the e-mail message. These users do not open the e-mail message. Instead they delete the e-mail message. These users’ computers are not infected with the virus. Step 3a. Some users open the attachment and their computers become infected with the virus.

7. Computer Viruses, Worms, and Trojan Horses To protect your system from a macro virus… p. 560 Fig. 11-3  Set macro security level in applications that allow you to write macros  At medium security level, warning displays that document contains macro  Macros are instructions saved in an application, such as word processing or spreadsheet program

8. Computer Viruses, Worms, and Trojan Horses An antivirus program… p. 560 - 561 Fig. 11-4  Identifies and removes computer viruses  Most also protect against worms and Trojan horses

9. Computer Viruses, Worms, and Trojan Horses A virus signature is… p. 561 Fig. 11-5  A specific pattern of virus code  Also called virus definition  Antivirus programs look for virus signatures

10. Keeps file in separate area of hard disk Computer Viruses, Worms, and Trojan Horses An antivirus program inoculates a program file by… p. 561 Recording information about program such as file size and creation date Attempts to remove any detected virus Using information to detect if virus tampers with file Quarantines infected files that it cannot remove

11. Computer Viruses, Worms, and Trojan Horses Tips to prevent virus, worm, and Trojan horse infections… p. 562 Install a personal firewall program If the antivirus program flags an e-mail attachment as infected, delete the attachment immediately Set the macro security in programs so you can enable or disable macros Never open an e-mail attachment unless you are expecting it and it is from a trusted source Install an antivirus program on all of your computers Check all downloaded programs for viruses, worms, or Trojan horses

12. Computer Viruses, Worms, and Trojan Horses What is a denial of service attack and back door? p. 562 A denial of service attack is an assault which disrupts access to an Internet service such as the Web or e-mail A back door is a program or set of instructions in a program that allow users to bypass security controls when accessing a computer resource

13. Computer Viruses, Worms, and Trojan Horses Spoofing is… p. 563 Making a network or Internet Transmission appear legitimate IP spoofing occurs when an intruder computer fools a network into believing its IP address is from a trusted source Perpetrators of IP spoofing trick their victims into interacting with a phony Web site

14. Computer Viruses, Worms, and Trojan Horses A firewall is… p. 563 Fig. 11-7  A security system consisting of hardware and/or software that prevents unauthorised network access

15. Computer Viruses, Worms, and Trojan Horses A personal firewall utility is… p. 564 Fig. 11-8  A program that protects personal computers and its data from unauthorised intrusions  Monitors transmissions to and from computer  Informs you of attempted intrusion

16. Activity Complete Activity 1 in OneNote

17. Unauthorized Access and Use Companies protect themselves against hackers by… p. 564 Intrusion detection software analyzes network traffic, assesses system vulnerabilities, and identifies intrusions and suspicious behavior Access control defines who can access computer and what actions they can take Audit trail records access attempts

18. Unauthorized Access and Use Other ways to protect your personal computer are… p. 565 Fig. 11-9  Disable file and printer sharing on Internet connection File and printer sharing turned off

19. Unauthorized Access and Use A user name is… p. 566 Fig. 11-10  A unique set of characters that identifies a user  Password is private combination of characters associated with the user name that allows access to computer resources

20. Unauthorized Access and Use Make your password more secure by… p. 567 Fig. 11-11  Using longer passwords to provide greater security

21. Unauthorized Access and Use A possessed object is… p. 567 Fig. 11-12  An item that you must carry to gain access to a computer or facility  Often used with a numeric password called a Personal Identification Number (PIN)

22. Unauthorized Access and Use A biometric device can… p. 567 - 568 Fig. 11-13  Authenticate a person’s identity using personal characteristics  Fingerprint, hand geometry, voice, signature, and iris

23. Activity Complete Activity 2 in OneNote

24. Hardware Theft and Vandalism Hardware theft and hardware vandalism… p. 569 Fig. 11-14  Hardware theft is act of stealing computer equipment  Cables sometimes used to lock equipment  Some notebook computers use passwords, possessed objects, and biometrics as security methods  For PDAs, you can password- protect the device  Hardware vandalism is act of defacing or destroying computer equipment

25. Software Theft Software theft is… p. 570 The act of stealing or illegally copying software or intentionally erasing programs Software piracy is illegal duplication of copyrighted software

26. Software Theft A licence agreement gives… p. 570 Fig. 11-15  You the right to use software  A standard single-user licence agreement allows users to install software on one computer, make backup copy, and sell software after removing from computer

27. Software Theft Some safeguards against software theft include… p. 571 Product activation allow users to input product identification numbers online or by phone and receive a unique installation identification number in return Business Software Alliance (BSA) promotes better understanding of software piracy problems

28. Information Theft Encryption… p. 571 - 572 Fig. 11-16  Safeguards against information theft  Is the process of converting plaintext (readable data) into ciphertext (unreadable characters)  Encryption key (formula) often uses more than one method  To read the data, the recipient must decrypt, or decipher, the data

29. Information Theft This is what an encrypted file looks like… p. 573 Fig. 11-17

30. Activity Complete Activity 3 in OneNote

31. Secure site Secure site – a Web site using encryption to secure data Internet Security Risks How do Web browsers provide secure data transmission? p. 573 Digital certificate Digital certificate is notice that guarantees Web site is legitimate Many Web browsers use encryption

32. Internet Security Risks A certificate authority (CA)… p. 573 Fig. 11-18  Authorized person or company that issues and verifies digital certificates  Users apply for digital certificate from CA

33. Internet Security Risks Secure Sockets Layer (SSL)… p. 574 Fig. 11-19  Provides encryption of all data that passes between client and Internet server  Web addresses beginning with “https” indicate secure connections

34. Undervoltage—drop in electrical supply System Failure A system failure… p. 574 Overvoltage or power surge— significant increase in electrical power Noise—unwanted electrical signal Caused by aging hardware, natural disasters, or electrical power disturbances Can cause loss of hardware, software, or data The prolonged malfunction of a computer

35. System Failure A surge protector… p. 574 - 575 Figs. 11-20–11-21  Protects computer and equipment from electrical power disturbances  Uninterruptible power supply (UPS) is surge protector that provides power during power loss

36. Backing Up — The Ultimate Safeguard A backup… p. 576 Is a duplicate of file(s), program(s), or disk(s) Full backup Full backup all files in the computer Selective backup Selective backup select which files to back up Three-generation backup Three-generation backup preserves three copies of important files In case of system failure or corrupted files, restore files by copying to original location

37. Wireless Security To ensuring wireless communication is secure… p. 577 Fig. 11-22  Secure your wireless access point (WAP)  WAP should not broadcast your network name  Enable Wired Equivalent Privacy

38. Updating anti-virus software Software needs to be continually updated since new viruses are being written all the time It has been suggested that up to 200 new viruses are written every week Most vendors of anti virus software have a website from where you can download the most current version of their software

39. Activity Complete Activity 4 in OneNote