Discovering Computers
Enhanced Edition ©2017
Tools, Apps, Devices, and the Impact of Technology
Chapter 5
Digital Security,
Ethics, and Privacy
Objectives Overview
Describe various types
Define the term, digital Discuss techniques to
of Internet and network
security risks, and prevent unauthorized
attacks, and explain
briefly describe the computer access and
ways to safeguard
types of cybercriminals use
against these attacks
Explain the ways that Discuss how
software manufacturers encryption, digital
protect against signatures, and digital
software piracy certificates work
© 2017 Cengage Learning®. May not be scanned, copied
See Page 212 or duplicated, or posted to a publicly accessible website, 2
for Detailed Objectives in whole or in part.
Objectives Overview
Identify safeguards Identify risks and
against hardware theft, Explain the options safeguards associated
vandalism, and system available for backing up with wireless
failure communications
Recognize issues
related to information Discuss issues
accuracy, intellectual surrounding
property right and information privacy
green computing
© 2017 Cengage Learning®. May not be scanned, copied
See Page 212 or duplicated, or posted to a publicly accessible website, 3
for Detailed Objectives in whole or in part.
Digital Security Risks
• A digital security risk is any event or action that could
cause a loss of or damage to a computer or mobile device
hardware, software, data, information, or processing
capability
• Any illegal act involving the use of a computer or related
devices generally is referred to as a computer crime
• A cybercrime is an online or Internet-based illegal act
© 2017 Cengage Learning®. May not be scanned, copied
Page 212 or duplicated, or posted to a publicly accessible website, 4
in whole or in part.
Digital Security Risks
© 2017 Cengage Learning®. May not be scanned, copied
Page 213 or duplicated, or posted to a publicly accessible website, 5
Figure 5-1 in whole or in part.
Cybercrimes and Cybercriminals
Hacker Cracker Script kiddie
Unethical
Corporate spies Cyberextortionist
employees
Cyberterrorist
© 2017 Cengage Learning®. May not be scanned, copied
Page 214 or duplicated, or posted to a publicly accessible website, 6
in whole or in part.
Internet and Network Attacks
• Information transmitted
over networks has a higher
degree of security risk than
information kept on an
organization’s premises
• Malware, short for
malicious software, consists
of programs that act (do
something) without a user’s
knowledge and deliberately
alter the operations of
computers and mobile
devices
Page 215 © 2017 Cengage Learning®. May not be scanned, copied
7
or duplicated, or posted to a publicly accessible website,
Table 5-1
Internet and Network Attacks
© 2017 Cengage Learning®. May not be scanned, copied
Page 215 or duplicated, or posted to a publicly accessible website, 8
Figure 5-2 in whole or in part.
Internet and Network Attacks
• A botnet is a group of compromised computers or mobile devices
connected to a network
– A compromised computer or device is known as a zombie
• A denial of service attack (DoS attack) disrupts computer access to
an Internet service
• A back door is a program or set of instructions in a program that
allow users to bypass security controls
• Spoofing is a technique intruders use to make their network or
Internet transmission appear legitimate
© 2017 Cengage Learning®. May not be scanned, copied
Pages 216 - 217 or duplicated, or posted to a publicly accessible website, 9
in whole or in part.
Internet and Network Attacks
• A firewall is hardware and/or software that
protects a network’s resources from intrusion
© 2017 Cengage Learning®. May not be scanned, copied
Pages 219 - 220 or duplicated, or posted to a publicly accessible website, 10
Figure 5-4 in whole or in part.
Unauthorized Access and Use
Unauthorized access is Unauthorized use is the
the use of a computer or use of a computer or its
network without data for unapproved or
permission possibly illegal activities
© 2017 Cengage Learning®. May not be scanned, copied
Page 221 or duplicated, or posted to a publicly accessible website, 11
in whole or in part.
Unauthorized Access and Use
• Access controls define who can access a computer,
device, or network; when they can access it; and
what actions they can take while accessing it
– User name
– Password
© 2017 Cengage Learning®. May not be scanned, copied
Pages 222 - 223 or duplicated, or posted to a publicly accessible website, 12
Figure 5-6 in whole or in part.
Unauthorized Access and Use
• A passphrase is a private combination of words, often containing
mixed capitalization and punctuation, associated with a user name
that allows access to certain computer resources
• A PIN (personal identification number), sometimes called a
passcode, is a numeric password, either assigned by a company or
selected by a user
• A possessed object is any item that you must possess, or carry with
you, in order to gain access to a computer or computer facility
• A biometric device authenticates a person’s identity by translating
a personal characteristic into a digital code that is compared with a
digital code in a computer or mobile device verifying a physical or
behavioral characteristic
© 2017 Cengage Learning®. May not be scanned, copied
Pages 223 - 224 or duplicated, or posted to a publicly accessible website, 13
in whole or in part.
Unauthorized Access and Use
Face
Fingerprint
recognition
reader
system
Hand Voice
geometry verification
system system
Signature Iris
verification recognition
system system
© 2017 Cengage Learning®. May not be scanned, copied
Pages 224 – 226 or duplicated, or posted to a publicly accessible website, 14
Figures 5-8 – 5-11 in whole or in part.
Unauthorized Access and Use
• Two-step verification uses two separate methods,
one after the next, to verify the identity of a user
– Identification
– Authentication
© 2017 Cengage Learning®. May not be scanned, copied
Pages 226 – 227 or duplicated, or posted to a publicly accessible website, 15
Figure 5-12 in whole or in part.
Unauthorized Access and Use
• Digital forensics is the discovery, collection, and
analysis of evidence found on computers and
networks
• Many areas use digital forensics
Law Criminal Military
enforcement prosecutors intelligence
Information
Insurance
security
agencies
departments
© 2017 Cengage Learning®. May not be scanned, copied
Page 227 or duplicated, or posted to a publicly accessible website, 16
in whole or in part.
Software Theft
• Software theft occurs when someone:
Steals software Intentionally
media erases programs
Illegally registers
Illegally copies a
and/or activates
program
a program
© 2017 Cengage Learning®. May not be scanned, copied
Page 228 or duplicated, or posted to a publicly accessible website, 17
in whole or in part.
Software Theft
• Many manufacturers incorporate an activation
process into their programs to ensure the
software is not installed on more computers than
legally licensed
• During the product activation, which is conducted
either online or by phone, users provide the
software product’s identification number to
associate the software with the computer or
mobile device on which the software is installed
© 2017 Cengage Learning®. May not be scanned, copied
Page 228 or duplicated, or posted to a publicly accessible website, 18
in whole or in part.
Software Theft
• A license agreement is the right to use software
© 2017 Cengage Learning®. May not be scanned, copied
Pages 228 – 229 or duplicated, or posted to a publicly accessible website, 19
Figure 5-13 in whole or in part.
Information Theft
• Information theft occurs when someone steals
personal or confidential information
• Encryption is a process of converting data that is
readable by humans into encoded characters to
prevent unauthorized access
© 2017 Cengage Learning®. May not be scanned, copied
Page 229 or duplicated, or posted to a publicly accessible website, 20
in whole or in part.
Information Theft
© 2017 Cengage Learning®. May not be scanned, copied
Page 230 or duplicated, or posted to a publicly accessible website, 21
Figure 5-14 in whole or in part.
Information Theft
• A digital signature is an encrypted code that a
person, website, or organization attaches to an
electronic message to verify the identity of the
message sender
• A digital certificate is a notice that guarantees a
user or a website is legitimate
• A website that uses encryption techniques to
secure its data is known as a secure site
© 2017 Cengage Learning®. May not be scanned, copied
Page 231 or duplicated, or posted to a publicly accessible website, 22
in whole or in part.
Information Theft
© 2017 Cengage Learning®. May not be scanned, copied
Page 231 or duplicated, or posted to a publicly accessible website, 23
Figure 5-15 in whole or in part.
Hardware Theft and Vandalism
Hardware vandalism
Hardware theft is
is the act of defacing
the act of stealing
or destroying digital
digital equipment
equipment
© 2017 Cengage Learning®. May not be scanned, copied
Page 233 or duplicated, or posted to a publicly accessible website, 24
in whole or in part.
Hardware Theft and Vandalism
© 2017 Cengage Learning®. May not be scanned, copied
Page 233 or duplicated, or posted to a publicly accessible website, 25
Figure 5-16 in whole or in part.
System Failure
• A system failure is the prolonged malfunction of a
computer
• A variety of factors can lead to system failure,
including:
– Aging hardware
– Natural disasters (fires, floods, and lightning strike)
– Electrical power problems (Noise, undervoltages, and
overvoltages)
Page 396 Discovering Computers Fundamentals, 2012 Edition 26
Chapter 10
System Failure
• Two ways to protect from system failures caused
by electrical power variations include surge
protectors and uninterruptable power supplies
(UPS)
Page 396 Discovering Computers Fundamentals, 2012 Edition 27
Figures 10-13 – 10-14 Chapter 10
Backing Up – The Ultimate Safeguard
• A backup is a duplicate of a file, program, or
media that can be used if the original is lost,
damaged, or destroyed
– To back up a file means to make a copy of it
• Off-site backups are stored in a location separate
from the computer or mobile device site
Cloud
Storage
© 2017 Cengage Learning®. May not be scanned, copied
Pages 233 - 234 or duplicated, or posted to a publicly accessible website, 28
in whole or in part.
Backing Up – The Ultimate Safeguard
• Categories of backups:
– Full
– Differential
– Incremental
– Selective
– Continuous data
protection
– Cloud
© 2017 Cengage Learning®. May not be scanned, copied
Page 234 29
or duplicated, or posted to a publicly accessible website,
Backing Up – The Ultimate Safeguard
© 2017 Cengage Learning®. May not be scanned, copied
Page 234 or duplicated, or posted to a publicly accessible website, 30
Table 5-2 in whole or in part.
Wireless Security
• Wireless access poses
additional security risks
• Some perpetrators
connect to other’s
wireless networks to gain
free Internet access or
confidential data
• Others connect to a
network through an
unsecured wireless access
point (WAP) or
combination router/WAP
Page 236 © 2017 Cengage Learning®. May not be scanned, copied
31
or duplicated, or posted to a publicly accessible website,
Figure 5-18
Ethics and Society
• Technology ethics are
the moral guidelines
that govern the use of
computers, mobile
devices, information
systems, and related
technologies
• Information accuracy is
a concern
– Not all information on
the Internet is correct
Pages 238 - 240 © 2017 Cengage Learning®. May not be scanned, copied
32
or duplicated, or posted to a publicly accessible website,
Figure 5-20
Ethics and Society
• Intellectual property refers to unique and original
works such as ideas, inventions, art, writings,
processes, company and product names, and logos
• Intellectual property rights are the rights to which
creators are entitled to their work
• A copyright protects any tangible form of expression
• Digital rights management (DRM) is a strategy
designed to prevent illegal distribution of movies,
music, and other digital content
© 2017 Cengage Learning®. May not be scanned, copied
Page 240 or duplicated, or posted to a publicly accessible website, 33
in whole or in part.
Ethics and Society
• Green computing involves reducing the electricity
and environmental waste while using computers,
mobile devices, and related technologies
© 2017 Cengage Learning®. May not be scanned, copied
Page 241 or duplicated, or posted to a publicly accessible website, 34
Figure 5-22 in whole or in part.
Information Privacy
• Information privacy refers to the right of
individuals and companies to deny or restrict the
collection, use, and dissemination of information
about them
• Huge databases store data online
• Some employers monitor your computer usage
and email messages
• It is important to safeguard your information
© 2017 Cengage Learning®. May not be scanned, copied
Page 242 or duplicated, or posted to a publicly accessible website, 35
in whole or in part.
Information Privacy
Page 242 © 2017 Cengage Learning®. May not be scanned, copied
36
or duplicated, or posted to a publicly accessible website,
Figure 5-23
Information Privacy
• Phishing is a scam in which a perpetrator sends an
official looking email message that attempts to
obtain your personal and/or financial information
© 2017 Cengage Learning®. May not be scanned, copied
Pages 244 - 245 or duplicated, or posted to a publicly accessible website, 37
in whole or in part.
Information Privacy
• Spyware is a program placed on a computer or
mobile device without the user’s knowledge that
secretly collects information about the user and
then communicates the information it collects to
some outside source while the user is online
• Adware is a program that displays an online
advertisement in a banner or pop-up window on
webpages, email messages, or other Internet
services
© 2017 Cengage Learning®. May not be scanned, copied
Page 245 or duplicated, or posted to a publicly accessible website, 38
in whole or in part.
Information Privacy
• Social engineering is defined as gaining
unauthorized access to or obtaining confidential
information by taking advantage of the trusting
human nature of some victims and the naivety of
others
© 2017 Cengage Learning®. May not be scanned, copied
Page 245 or duplicated, or posted to a publicly accessible website, 39
in whole or in part.
Information Privacy
Employee monitoring involves the use of computers, mobile
devices, or cameras to observe, record, and review an
employee’s use of a technology, including communications such
as email messages, keyboard activity (used to measure
productivity), and websites visited
Many programs exist that easily allow employers to monitor
employees. Further, it is legal for employers to use these
programs
© 2017 Cengage Learning®. May not be scanned, copied
Page 247 or duplicated, or posted to a publicly accessible website, 40
in whole or in part.
Information Privacy
• Content filtering is the
process of restricting
access to certain
material on the web
– Many businesses use
content filtering
• Web filtering software
restricts access to
specified websites
Pages 247 - 248 © 2017 Cengage Learning®. May not be scanned, copied
41
or duplicated, or posted to a publicly accessible website,
Figure 5-26
Summary
Risks and safeguards associated
with Internet and network
Variety of digital security Cybercrime and attacks, unauthorized access
and use, software theft,
risks cybercriminals information theft, and
hardware theft, vandalism, and
system failure
Various backup Ethical issues in society
strategies and methods and various ways to
of securing wireless protect the privacy of
communications personal information
© 2017 Cengage Learning®. May not be scanned, copied
Page 249 or duplicated, or posted to a publicly accessible website, 42
in whole or in part.
Discovering Computers
Enhanced Edition ©2017
Tools, Apps, Devices, and the Impact of Technology
Chapter 5
Digital Security,
Ethics, and Privacy
Chapter 5 Complete
