Computer Essentials Module 13 - Computer Security

Saudi Electronic University - Computer Essentials - Module 13 - Computer Security

• Computer Security: An essential aspect of digital life, requiring continuous effort from individuals, organizations, and governments to protect against a wide range of cyber threats.

Weekly Learning Outcomes

• WLOC1: Summarize the dangers of sharing personal information online.
• WLOC2: Explain how cookies and unique identifiers compromise privacy.
• WLOC3: Detail cybercrime and its techniques.
• WLOC4: Discuss various types of malware.
• WLOC5: Describe methods for avoiding cybercrime.

Contents

• Wireless Network Authentication
• Sharing Personal Information Online: Dangers of sharing personal information online.
• Privacy Concerns: How cookies and unique identifiers compromise privacy.
• Security Threats from Criminals: Security threats posed by computer criminals.
• Cybercrime Techniques: Detail cybercrime techniques.
• Spoofing and Sniffing: Explain spoofing and sniffing techniques.
• Malware: Discussion of various types of malware.
• Malicious Programs: Description of malicious programs.

CIA Triad

• Confidentiality: Protecting sensitive information from unauthorized access. Techniques include encryption, two-factor authentication.
• Integrity: Maintaining data's accuracy and preventing unauthorized alterations. Techniques for integrity include hashing and access controls.
• Availability: Ensuring authorized users access data when needed. Techniques include hardware maintenance, software updating, network optimization, and backup systems.

Types of Encryption

• Symmetric Encryption: Uses the same key for encryption and decryption, but requires secure key management.
• Asymmetric Encryption: Uses a pair of keys (public and private) for encryption and decryption, with the public key being shared openly.

Types of Cyber Threats

• Malware: Malicious software designed to cause damage to a computer. Types include:
  • Virus: Attaches to files and spreads.
  • Trojan Horse: Hidden in legitimate software.
  • Worm: Copies itself from computer to computer without human interaction.
  • Ransomware: Encrypts files and demands payment for decryption.
  • Spyware: Secretly records user activity.
  • Keyloggers: Record keystrokes to steal passwords.
• Spoofing: Attacker's computer assumes a false internet address to gain access to the network.
• Sniffing: Ability to capture copies of data packets as they travel across the network and decode their content.
• Phishing: Tricking individuals into sharing sensitive information, using various forms like general phishing, spear phishing, whaling, and pharming.

Prevention and Mitigation Techniques

• Antivirus Software: Use reputable antivirus and anti-malware programs.
• Software Updates: Keep software (including operating systems) updated with security patches.
• Email Caution: Be cautious with email attachments and links from unknown or untrusted sources; do not click unknown email links.
• Backups: Regularly back up important data.
• Education & Awareness: Training users to recognize and report phishing attempts.
• Spam Filters: Implement email filtering solutions.
• Multifactor Authentication: Use methods like OTPs (One-Time Passwords), biometric verification, or security tokens.

Best Practices in Cyber Security

• Strong, Unique Passwords: Avoid common words and phrases. Use a mix of letters, numbers, and symbols.
• Multi-Factor Authentication: Use additional verification methods beyond passwords.
• Regular Software Updates and Patch Management: Keep software current.
• Antivirus and Anti-Malware Solutions: Install and update reputable antivirus/anti-malware programs, and perform regular scans.
• Regular Backups: Back up critical data using multiple methods and ensure secure storage and recovery.

Required and Recommended Reading

• Required Reading: Chapter 32 (Introduction to Computers and Information Technology: Preparing for IC3 Certification)
• Recommended Reading: Chapter 15 (Essential for Computing Studies, Profession, and Entrance Examinations)

This quiz covers the critical aspects of computer security as outlined in Module 13 of Saudi Electronic University's Computer Essentials course. It addresses the dangers of sharing personal information online, privacy concerns related to cookies, and various types of cybercrime. Additionally, you'll learn about malware and methods to protect against cyber threats.