1. NETWORK SECURITY LAB Rehab AlFallaj

2. Learning Objective ■In this Lecture you will learn: –Ethical Issues related to network security.

3. Ethics ■ What is Ethics? –It is the branch of philosophy that involves systematizing, defending, and recommending concepts of right and wrong conduct (actions). –habits. –Customs. –Good deeds regarding specific thing.

4. Computer Ethics ■How computing professionals should make decisions regarding professional and social conduct. ■Three primary Decision influences: –The individual's own personal code. –Any informal code of ethical conduct that exists in the work place. –Exposure to formal codes of ethics.

5. Why Computer Ethics? ■access to confidential data and knowledge about individuals' and companies' networks and systems. ■That power can be abused, either deliberately or inadvertently. Associations and organizations for IT pros are beginning to address the ethical side of the job, but again, there is no requirement for IT security personnel to belong to those organizations. ■Computer crime refers to the unauthorized use, access, modification, and destruction of hardware, software, data, or network resources, unauthorized release of information, unauthorized copying of software (Hacking) or ( black hat)

6. Why Computer Ethics? (cont.) ■Internet and digital firm technologies make it easier to assemble, integrate, and distribute information, unleashing new concerns about the appropriate use of customer information, the protection of personal privacy, and the protection of intellectual property. 6

7. Code of ethics. ■Privacy and personal information, Freedom of speech in cyberspace, Intellectual property and Cyber crime. ■Privacy is the claim of individuals to be left alone, free from surveillance or interference from other individuals or organizations, including the state. ■Claims to privacy are also involved at the workplace. ■Internet technology has posed new challenges for the protection of individual privacy.

8. Ethical issues related to network security ■#1: PRIVACY: Does information's availability justify its use? Should organizations' ability to collect and process data on exponentially increasing scales be limited in any way? Does the fact that information can be architected for a particular purpose mean it should be, even if by so doing individual privacy rights are potentially violated? If data meant for one use is diverted to another process which is socially redeeming and would result in a greater good or could result in a financial gain, does that mitigate the ethical dilemma, no matter how innocent and pure the motivation?

9. Ethical issues related to network security ■#2: PRIVACY: How much effort and expense should managers incur in considering questions of data access and privacy? ■All sensitive data such as compensation and background data and personal identification information, such as social security number and account identifiers have to be maintained and accessed by authorized personnel ■Systems that track this data can be secured, ■which efforts to ensure data can be accessed only by those who are authorized to do so can be considered reasonable and appropriate?

10. Ethical issues related to network security ■#3: OWNERSHIP: What can employers expect from employees with regard to nondisclosure when going to work for another firm? Is it ethical to use our special knowledge gained at one employer to the benefit of another? How do you realistically restrict yourself from doing so?

11. Ethical issues related to network security ■#4: OWNERSHIP: What part of an information asset belongs to an organization and what is simply part of an employee's general knowledge? you've built an asset owned by your company, but do you have a legitimate claim to any part of it? Can you take any part of this knowledge or even the design or code itself with you to another employer or for the purpose of starting your own company?

12. Ethical issues related to network security ■#5: CONTROL: Do employees know the degree to which behavior is monitored? Do organizations have an obligation to notify employees as to the extent of that monitoring? Should an organization make it clear that in addition to monitoring how long employees are using the Internet, it's also watching which Web sites they visit? If the organization merely says there's no expectation of privacy when using the e-mail system, is it an ethical violation when employees later find out it was actually reading their e-mails?

13. Ethical issues related to network security ■#6: CONTROL: Does data gathered violate employee privacy rights? Technology has enabled this data to be gathered, processed, and accessed quickly and inexpensively. Is technology responsible for enabling unethical behavior? Many organizations have started adding a credit and background check to the standard reference check during the hiring process. Are those organizations obligated to tell us they're doing this and what results they've received? The justification for doing the credit check typically is that a person who can't manage his or her own finances probably can't be trusted with any fiduciary responsibility on behalf of the organization. Does this pass the smell test or is this actually an infringement of privacy?

14. Ethical issues related to network security ■#7: ACCURACY: Is accuracy an explicit part of someone's responsibility?

15. Ethical issues related to network security ■#8: ACCURACY: Have the implications of potential error been anticipated? Do managers have a correspondingly greater responsibility to assess negative outcomes and the mitigations of costs and effects of errors? Can management or system owners be held accountable if unforeseen errors occur? Is this also the case for predictable but unmitigated error?

16. Ethical issues related to network security ■#9: SECURITY: Have systems been reviewed for the most likely sources of security breach? Networks can be breached, personal identification information can be compromised, identities can be stolen and potentially result in personal financial ruin, critical confidential corporate information or classified government secrets can be stolen from online systems, Web sites can be hacked, keystroke loggers can be surreptitiously installed, and a host of others

17. Ethical issues related to network security ■#10: SECURITY: What's the liability exposure of managers and the organization? Can system owners be held personally liable when security is compromised? To what extent is the victimized corporation liable to the secondary victims, those whose data was stolen?

18. Ethical issues related to network security ■#11: Security policy Security policy is collection of rules that help the users to behave in certain way to identify what is legal and illegal to access to protect computer system in their organization. It help the administrator to make sure that everything in the network organization are secure and nobody can destroy or damage the network. The security policies are very important to enterprise network. Also without security policies the users will open sites and this sits may have a virus or worms which will effect to your network performance. Also unauthorized person can access to network and do illegal action which will destroy the network. There are many way to apply security policy for example strong password, use firewall, detect from unauthorized users and so on.

19. Ethical issues related to network security ■One of the biggest ethical issue that related to network is security policy. In some organization the security policy are apply weakly or in bad way. For example the security policy is not apply fairly for all users or employee inside the organization which will effect negatively to organization network and cause a great loss to organization through stolen the necessary information that belong to this organization and then destroy the network.

20. Ethical issues related to network security ■#12: Hackers Hackers are smart programmer. They try to damage or break the computer system. The aim of destroying the system is enjoyment and learning a new programming language. There are many tools of hackers for example ethereal, Dsniff, kismet and AirSnort. The hackers are big issue to the network and it is spread rapidly in the word day after day. Hackers act certain way for example they inter the network buy any method or programs that they created by themselves a that help to brake the network and steal important information about organization which will gain a lot of money from this information. For example stolen health insurance from the any organization and they will sell this information to another organization without any permission.

21. Ethical issues related to network security ■#13 Weak Network Security: The design weak network security is become one of the biggest ethical issue that related to network. A lot of stolen and crimes happen through the world because the weak network security. Some administrator in the companies are not apply strong security to the network this cause a lot of unauthorized users access to network and look to secret information by this information can effect to performance of organization. Also unauthorized use can destroy the network and cause a great loss for organization. All this action happen through weak network security. The weak network security could happen from this reasons:

22. Ethical issues related network management: ■#14:Network administrator: 1-The administration are give the employee unnecessary permission. 2-The administrator do not take care through doing his job in right way. 3-The administration are not treat the employee fairly.

23. Reference: ■https://en.wikipedia.org/wiki/Ethicshttps://en.wikipedia.org/wiki/Ethics ■http://www.computerworld.com/article/2557944/security0/ethical-issues-for-it- security-professionals.htmlhttp://www.computerworld.com/article/2557944/security0/ethical-issues-for-it- security-professionals.html ■http://www.techrepublic.com/article/10-ethical-issues-confronting-it-managers/http://www.techrepublic.com/article/10-ethical-issues-confronting-it-managers/ ■https://sites.google.com/site/network77oman/ethical-issue-related-to-networkhttps://sites.google.com/site/network77oman/ethical-issue-related-to-network ■http://www.ijecbs.com/July2011/45.pdfhttp://www.ijecbs.com/July2011/45.pdf ■http://www.citc.gov.sa/English/RulesandSystems/CITCSyste/Documents/LA_004_%20E _%20Anti-Cyber%20Crime%20Law.pdfhttp://www.citc.gov.sa/English/RulesandSystems/CITCSyste/Documents/LA_004_%20E _%20Anti-Cyber%20Crime%20Law.pdf ■http://www.financierworldwide.com/cyber-security-and-data-privacy-law-in-saudi- arabia/#.VrZTBlh97tQhttp://www.financierworldwide.com/cyber-security-and-data-privacy-law-in-saudi- arabia/#.VrZTBlh97tQ