Bài giảng Management information systems - Chapter 8: Protecting People and Information: Threats and Safeguards

Chapter 8Protecting People and Information: Threats and SafeguardsETHICSEthics – the principles and standards that guide our behavior toward other peopleEthics are rooted in history, culture, and religionBasic Ethical StructureIntellectual PropertyIntellectual property – intangible creative work that is embodied in physical formCopyright – legal protection afforded an expression of an ideaFair Use Doctrine – may use copyrighted material in certain situationsPirated software – unauthorized sale of copyrighted softwarePRIVACYPrivacy – the right to left alone when you want to be, to have control over your own personal possessions, and not to be observed without your consentDimensions of privacyPsychological: to have a sense of controlLegal: to be able to protect yourselfIdentity TheftIdentity theft – the forging of someone’s identity for the purpose of fraudIdentity TheftPhishing (carding, brand spoofing) – a technique to gain personal information for the purpose of identity theftSpear phishing – targeted to specific individualsWhaling – targeted to senior business executives and government leadersPharming – rerouting your request for a legitimate Web siteCookiesCookie – a small file that contains information about you and your Web activities, which a Web site places on your computerHandle cookies by usingWeb browser cookie management optionBuy a program that manages cookiesSpamSpam – unsolicited e-mail from businesses advertising goods and servicesGets past spam filters by Inserting extra charactersInserting HTML tags that do nothingReplying usually increases, rather than decreases, amount of spamAdware and SpywareAdware – software to generate ads that installs itself when you download another programSpyware (sneakware, stealthware) – software that comes hidden in downloaded software and helps itself to your computer resourcesTrojan Horse SoftwareTrojan horse software – software you don’t want inside software you do wantSome ways to detect Trojan horse softwareAdAware at www.lavasoftUSA.com The Cleaner at www.moosoft.com Trojan First Aid Kit (TFAK) at www.wilders.org Check it out before you download at www.spychecker.comPrivacy and Government AgenciesAbout 2,000 government agencies have databases with information on peopleGovernment agencies need information to operate effectivelyWhenever you are in contact with government agency, you leave behind information about yourselfSECURITY AND EMPLOYEESAttacks on information and computer resources come from inside and outside the companyComputer sabotage costs about $10 billion per yearIn general, employee misconduct is more costly than assaults from outsideSecurity and Outside ThreatsHackers – knowledgeable computer users who invade other people's computersComputer virus (virus) – software that is written with malicious intent to cause annoyance or damageWorm – virus that spreads itself from computer to computer usually via e-mailDenial-of-service (DoS) attack – floods a Web site with so many requests for service that it slows down or crashesSecurity MeasuresAnti-virus softwareAnti-spyware and anti-adware softwareSpam protection softwareAnti-phishing softwareFirewallEncryptionBiometricsMany othersSecurity MeasuresAnti-rootkit software – stops outsiders taking control of your machineEncryption – scrambles the contents of a file so that you can’t read it without the decryption keyPublic Key Encryption (PKE) – an encryption system with two keys: a public for everyone and a private one for the recipientBiometrics – the use of physiological characteristics for identification purposes