Discovering

Computers 2012
Your Interactive Guide
to the Digital World
Objectives Overview

Define the term, Describe various types

Discuss techniques to
computer security risks, of Internet and network
prevent unauthorized
and briefly describe the attacks, and identify
computer access and
types of cybercrime ways to safeguard
use
perpetrators against these attacks

Explain the ways

Identify safeguards Discuss how encryption
software manufacturers
against hardware theft works, and explain why
protect against
and vandalism it is necessary
software piracy

See Page 555 Discovering Computers 2012: Chapter 11 2

for Detailed Objectives
Objectives Overview

Discuss the types of Identify risks and

Explain the options
devices available that safeguards associated
available for backing up
protect computers from with wireless
computer resources
system failure communications

Recognize issues related

Discuss ways to prevent
to information accuracy, Discuss issues
health-related disorders
intellectual property surrounding information
and injuries due to
rights, codes of conduct, privacy
computer use
and green computing

See Page 555 Discovering Computers 2012: Chapter 11 3

for Detailed Objectives
Computer Security Risks

A computer security risk is any event or action that could

cause a loss of or damage to computer hardware,
software, data, information, or processing capability
A cybercrime is an online or Internet-based illegal act

Hackers Crackers Script Kiddies Corporate Spies

Unethical
Cyberextortionists Cyberterrorists
Employees

Pages 556 - 557 Discovering Computers 2012: Chapter 11 4

Computer Security Risks

Pages 556 557 Discovering Computers 2012: Chapter 11 5

Figure 11-1
Internet and Network Attacks

Information transmitted over networks has a higher

degree of security risk than information kept on an
organizations premises
An online security service is a Web site that evaluates
your computer to check for Internet and e-mail
vulnerabilities

Page 558 Discovering Computers 2012: Chapter 11 6

Figure 11-2
Internet and Network Attacks

Computer
Worm Trojan Horse Rootkit
Virus
Affects a Copies itself A malicious Program that
computer repeatedly, program that hides in a
negatively by using up hides within computer
altering the resources or looks like and allows
way the and possibly a legitimate someone
computer shutting program from a
works down the remote
computer or location to
network take full
control

Page 558 Discovering Computers 2012: Chapter 11 7

Internet and Network Attacks

An infected computer has one or more of the

following symptoms:
Operating system Available memory Screen displays
Files become
runs much slower is less than unusual message
corrupted
than usual expected or image

Unknown
Music or unusual Programs or files
Existing programs programs or files
sound plays do not work
and files disappear mysteriously
randomly properly
appear

Operating system
System properties Operating system
shuts down
change does not start up
unexpectedly

Pages 558 - 559 Discovering Computers 2012: Chapter 11 8

Internet and Network Attacks

Page 559 Discovering Computers 2012: Chapter 11 9

Figure 11-3
Internet and Network Attacks

Page 561 Discovering Computers 2012: Chapter 11 10

Figure 11-6
Internet and Network Attacks

Users can take several

precautions to protect
their home and work
computers and mobile
devices from these
malicious infections

Page 560 561 Discovering Computers 2012: Chapter 11 11

Figure 11-7
Internet and Network Attacks

A botnet is a group of compromised computers connected to a

network
A compromised computer is known as a zombie
A denial of service attack (DoS attack) disrupts computer access to
Internet services
Distributed DoS (DDoS)
A back door is a program or set of instructions in a program that
allow users to bypass security controls
Spoofing is a technique intruders use to make their network or
Internet transmission appear legitimate

Pages 562 - 563 Discovering Computers 2012: Chapter 11 12

Internet and Network Attacks

A firewall is hardware and/or software that

protects a networks resources from intrusion

Pages 563 - 564 Discovering Computers 2012: Chapter 11 13

Figure 11-8
Internet and Network Attacks

Intrusion detection software

Analyzes all network traffic
Assesses system vulnerabilities
Identifies any unauthorized intrusions
Notifies network administrators of suspicious behavior
patterns or system breaches
Honeypot
Vulnerable computer that is set up to entice an intruder to
break into it
Page 564 Discovering Computers 2012: Chapter 11 14
Unauthorized Access and Use

Unauthorized access is Unauthorized use is the

the use of a computer or use of a computer or its
network without data for unapproved or
permission possibly illegal activities

Page 564 Discovering Computers 2012: Chapter 11 15

Unauthorized Access and Use

Organizations take
several measures to
help prevent
unauthorized access
and use
Acceptable use policy
Disable file and printer
sharing
Firewalls
Intrusion detection
software

Page 565 Discovering Computers 2012: Chapter 11 16

Figure 11-10
Unauthorized Access and Use

Access controls define who can access a

computer, when they can access it, and what
actions they can take
Two-phase processes called identification and
authentication
User name
Password
Passphrase
CAPTCHA
Pages 565 567 Discovering Computers 2012: Chapter 11 17
Figure 11-11
Unauthorized Access and Use

A possessed object is any A biometric device

item that you must carry to authenticates a persons
gain access to a computer identity by translating a
or computer facility personal characteristic into
Often are used in a digital code that is
combination with a personal compared with a digital
identification number (PIN) code in a computer

Page 568 Discovering Computers 2012: Chapter 11 18

Figure 11-14
Unauthorized Access and Use

Digital forensics is the discovery, collection, and

analysis of evidence found on computers and
networks
Many areas use digital forensics
Law Criminal Military
enforcement prosecutors intelligence

Information
Insurance
security
agencies
departments
Page 569 Discovering Computers 2012: Chapter 11 19
Hardware Theft and Vandalism

Hardware vandalism
Hardware theft is the
is the act of defacing
act of stealing
or destroying
computer equipment
computer equipment

Page 570 Discovering Computers 2012: Chapter 11 20

Hardware Theft and Vandalism

To help reduce the of chances of theft, companies

and schools use a variety of security measures
Cables to lock
Physical access controls Alarm systems
equipment

Real time location Passwords, possessed

system objects, and biometrics

Page 570 Discovering Computers 2012: Chapter 11 21

Figure 11-15
Software Theft

Software theft occurs when someone:

Steals software Intentionally

media erases programs

Illegally
Illegally copies a registers and/or
program activates a
program
Page 571 Discovering Computers 2012: Chapter 11 22
Software Theft

A single-user license agreement typically contains the

following conditions:
Permitted to
Install the software on one computer
Make one copy of the software
Remove the software from your computer before giving it away or selling it

Not permitted to
Install the software on a network
Give copies to friends or colleagues while continuing to use the software
Export the software
Rent or lease the software
Page 571 Discovering Computers 2012: Chapter 11 23
Software Theft

Copying, loaning,
borrowing, renting, or
distributing software
can be a violation of
copyright law
Some software requires
product activation to
function fully

Pages 571 572 Discovering Computers 2012: Chapter 11 24

Figure 11-16
Information Theft

Information theft occurs when someone steals

personal or confidential information
Encryption is a process of converting readable
data into unreadable characters to prevent
unauthorized access

Pages 572 - 573 Discovering Computers 2012: Chapter 11 25

Figure 11-17
Information Theft

Page 573 Discovering Computers 2012: Chapter 11 26

Figure 11-18
Information Theft

A digital signature is an encrypted code that a

person, Web site, or organization attaches to an
electronic message to verify the identity of the
sender
Often used to ensure that an impostor is not
participating in an Internet transaction
Web browsers and Web sites use encryption
techniques

Page 574 Discovering Computers 2012: Chapter 11 27

Information Theft

Popular security techniques include

Digital Transport Layer

Certificates Security (TLS)

Secure HTTP VPN

Pages 574 - 575 Discovering Computers 2012: Chapter 11 28

Information Theft

Pages 574 - 575 Discovering Computers 2012: Chapter 11 29

Figures 11-19 11-20
System Failure

A system failure is the prolonged malfunction of a

computer
A variety of factors can lead to system failure,
including:
Aging hardware
Natural disasters
Electrical power problems
Noise, undervoltages, and overvoltages
Errors in computer programs
Page 575 Discovering Computers 2012: Chapter 11 30
System Failure

Two ways to protect from system failures caused

by electrical power variations include surge
protectors and uninterruptable power supplies
(UPS)

Page 576 Discovering Computers 2012: Chapter 11 31

Figures 11-21 11-22
Backing Up The Ultimate Safeguard

A backup is a duplicate of a file, program, or disk

that can be used if the original is lost, damaged,
or destroyed
To back up a file means to make a copy of it
Offsite backups are stored in a location separate
from the computer site
Cloud
Storage

Page 577 Discovering Computers 2012: Chapter 11 32

Backing Up The Ultimate Safeguard

Two categories of Three-generation

backups: backup policy
Full backup
Grandparent
Selective backup

Parent

Child

Page 577 Discovering Computers 2012: Chapter 11 33

Wireless Security

Wireless access poses additional security risks

About 80 percent of wireless networks have no security
protection
War driving allows individuals to detect wireless
networks while driving a vehicle through the area

Page 578 Discovering Computers 2012: Chapter 11 34

Figure 11-23
Wireless Security

In additional to using firewalls, some safeguards

improve security of wireless networks:
A wireless access
Change the default
point should not
SSID
broadcast an SSID

Configure a WAP
so that only Use WPA or WPA2
certain devices can security standards
access it
Page 578 Discovering Computers 2012: Chapter 11 35
Health Concerns of Computer Use

The widespread use of

computers has led to
health concerns
Repetitive strain injury
(RSI)
Tendonitis
Carpal tunnel syndrome
(CTS)
Computer vision
syndrome (CVS)

Page 579 Discovering Computers 2012: Chapter 11 36

Figure 11-24
Health Concerns of Computer Use

Page 580 Discovering Computers 2012: Chapter 11 37

Figure 11-25
Health Concerns of Computer Use

Ergonomics is an
applied science devoted
to incorporating
comfort, efficiency, and
safety into the design of
items in the workplace

Page 580 Discovering Computers 2012: Chapter 11 38

Figure 11-26
Health Concerns of Computer Use

Computer addiction occurs when the computer

consumes someones entire social life
Symptoms of users include:
Craves Overjoyed Unable to stop
computer when at the computer
time computer activity

Irritable when Neglects Problems at

not at the family and work or
computer friends school
Page 581 Discovering Computers 2012: Chapter 11 39
Ethics and Society

Computer ethics are

the moral guidelines
that govern the use of
computers and
information systems
Information accuracy is
a concern
Not all information on
the Web is correct

Pages 581 582 Discovering Computers 2012: Chapter 11 40

Figure 11-28
Ethics and Society

Intellectual property rights are the rights to

which creators are entitled for their work

A copyright protects any tangible form of expression

An IT code of conduct is a written guideline

that helps determine whether a specific
computer action is ethical or unethical

Page 582 Discovering Computers 2012: Chapter 11 41

Ethics and Society

Page 583 Discovering Computers 2012: Chapter 11 42

Figure 11-29
Ethics and Society

Green computing involves reducing the electricity

and environmental waste while using a computer

Pages 583 584 Discovering Computers 2012: Chapter 11 43

Figure 11-30
Ethics and Society

Information privacy refers to the right of

individuals and companies to deny or restrict the
collection and use of information about them
Huge databases store data online
It is important to safeguard your information

Page 584 Discovering Computers 2012: Chapter 11 44

Ethics and Society

Page 584 Discovering Computers 2012: Chapter 11 45

Figure 11-31
Ethics and Society

When you fill out a

form, the merchant that
receives the form
usually enters it into a
database
Many companies today
allow people to specify
whether they want
their personal
information distributed
Page 585 Discovering Computers 2012: Chapter 11 46
Figure 11-32
Ethics and Society

A cookie is a small text file that a Web server stores on

your computer
Web sites use cookies for a variety of reasons:
Assist with
Allow for Store users
online
personalization passwords
shopping

Track how
Target
often users
advertisements
visit a site
Pages 585 586 Discovering Computers 2012: Chapter 11 47
Ethics and Society

Page 586 Discovering Computers 2012: Chapter 11 48

Figure 11-33
Ethics and Society

Spam is an unsolicited
e-mail message or
newsgroup posting
E-mail filtering blocks
e-mail messages from
designated sources
Anti-spam programs
attempt to remove
spam before it reaches
your inbox

Page 587 Discovering Computers 2012: Chapter 11 49

Figure 11-34
Ethics and Society

Phishing is a scam in
which a perpetrator sends
an official looking e-mail
message that attempts to
obtain your personal and
financial information
Pharming is a scam
where a perpetrator
attempts to obtain your
personal and financial
information via spoofing

Pages 587 - 588 Discovering Computers 2012: Chapter 11 50

Figure 11-35
Ethics and Society

The concern about privacy has led to the

enactment of federal and state laws regarding the
storage and disclosure of personal data
See Figure 11-36 on page 589 for a listing of major U.S.
government laws concerning privacy
The 1970 Fair Credit Reporting Act limits the
rights of others viewing a credit report to only
those with a legitimate business need

Page 588 Discovering Computers 2012: Chapter 11 51

Ethics and Society

Social engineering is defined as gaining

unauthorized access or obtaining confidential
information by taking advantage of trust and naivety

Employee monitoring involves the use of computers

to observe, record, and review an employees use of
a computer

Page 590 Discovering Computers 2012: Chapter 11 52

Ethics and Society

Content filtering is the

process of restricting
access to certain material
on the Web
Many businesses use
content filtering
Internet Content Rating
Association (ICRA)
Web filtering software
restricts access to
specified Web sites

Pages 590 591 Discovering Computers 2012: Chapter 11 53

Figure 11-37
Summary

Potential computer risks and Wireless security risks and

safeguards safeguards

Ethical issues surrounding

information accuracy,
Computer-related health intellectual property rights,
issues and preventions codes of conduct, green
computing, and information
privacy
Page 591 Discovering Computers 2012: Chapter 11 54
Discovering
Computers 2012
Your Interactive Guide
to the Digital World
Chapter 11 Complete