Chapter 9

Privacy, Security, and Ethics in Computing

• Learning changes everything
• Privacy concerns the collection and use of data about individuals
• Three primary privacy issues include: accuracy, property, and access
• Accuracy focuses on the responsibility of data collectors. Data collectors must ensure data is secure and correct
• Property relates to who owns the data
• Access concerns the responsibility of those who control and use data
• Big Data records all human events digitally
• Large organizations compile information about individuals daily.
• The federal government alone has over 2,000 databases.
• Information resellers/brokers collect and sell personal data (digital footprint) ,creating electronic profiles
• Personal information is a marketable commodity raising issues like collecting public but personally identifying information (such as Google Street View), spreading information without consent leading to identity theft, misinformation and mistaken identity
• The Freedom of Information Act and a right to look at your records held by government agencies are important considerations
• Private Networks monitor virtually everything employees do on their computers, including email monitoring, which is legal
• A proposed law might require companies to notify employees before monitoring
• Online identity is easily archived on the Web indefinitely
• Major privacy laws include the Gramm-Leach-Bliley Act (protecting personal financial information), Health Insurance Portability and Accountability Act (HIPAA - protecting medical records), and Family Educational Rights and Privacy Act (FERPA - protecting educational records).
• Most information collected by private organizations isn't currently included in existing laws
• Security protects individuals and organizations from theft and danger
• Hackers gain access with malicious intent (not all hackers are illegal)
• Cybercrime is criminal offenses involving computers and networks impacting over 400 million annually and costing about $400 billion annually
• Cyberterrorism is a politically motivated cybercrime

Forms of Computer Crime

• Identity theft- illegally assuming someone else's identity for financial gain
• Internet scams- fraud over the internet
• Data manipulation- unauthorized access and copying of network files
• Ransomware- malicious software that encrypts a user's data
• Denial-of-service attacks (DoS) and Distributed Denial-of-Service (DDoS) attacks- attempts to slow down/stop computer systems by overwhelming them with requests.

Internet Scams and Social Engineering

• Phishing- impersonating an organization to trick people into giving sensitive data
• Advanced-fee scams- receiving email from a person in distress, requiring financial assistance and payment of fees
• Greeting card scams- tricking victims into downloading malware to view a greeting card
• Bank loan/credit card scams- unusually good deals on loans or credit cards, demanding fees
• Lottery scams- claims of lottery winnings requiring a processing fee
• Social Engineering- manipulating people into revealing private data (identity theft, internet scams, data manipulation)
• Phishing is the most common social engineering technique

Malicious Software

• Malicious programs/Malware are designed by crackers to damage or disrupt a computer system
• A cracker is a computer criminal who creates and distributes malware
• Software like viruses, worms, and Trojan horses are examples of malicious software
• Viruses spread to other programs, Worms fill computers with self-replicating data, and Trojan horses are programs disguised as something else
• The Computer Fraud and Abuse Act makes spreading viruses a federal offense

Malicious Hardware

• Criminals use hardware for crime, including Zombies (computers infected by viruses, worms, or Trojan Horses), botnets (a collection of Zombies), rogue Wi-Fi hotspots (imitation of legitimate Wi-Fi to capture data), and infected USB flash drives

Computer Security Measures

• Prevent unauthorized people from viewing, copying or damaging data
• Measures like access restrictions, data encryption, disaster anticipates and data loss prevention are implemented
• Restrictions like passwords, dictionary attacks, biometric scanning (fingerprints, iris scans, and facial recognition) - secure access
• Automated security tasks like security suites, firewalls, and password managers make it possible
• Encryption codes information to make it unreadable except for authorized users
  • Common uses include email, file, website encryption; HTTPS, VPNs, WPA2 for secure access

Anticipating Disasters and Preventing Data Loss

• Physical security protects hardware.
• Data security protects software and data from unauthorized tampering
• Disaster recovery plans describe operating procedures for disaster events
• Frequent backups, redundant data storage, and storing data off-site prevent data loss

Making IT Work for You

• Precautions to take against high-tech crimes include:
  • Updating software
  • Regularly backing up data
  • Using antivirus software
  • Using strong passwords
  • Protecting against data breaches
  • Enabling two-factor authentication
  • Being careful when browsing and email scamming

Ethics

• Standards of moral conduct govern computing practices
• Computer ethics guidelines direct the morally acceptable use of computers
• Areas of consideration include copyright and digital rights management, cyberbullying, and plagiarism
  • Copyright gives creators control of their work
  • Software piracy is unauthorized copying
  • Digital rights management and the Digital Millennium Copyright Act protect digital content

Cyberbullying and Plagiarism

• Cyberbullying involves using the internet to harm others
• Plagiarism is presenting someone else's work as your own

Careers in IT

• IT security analysts maintain company security (network, systems, and data)
• Ensures confidentiality, integrity, and availability of information
• Experience in network administration/information systems is necessary
• Requires a bachelor's or associate's degree in information systems
• Must safeguard against external threats, have good communication and research skills
• Salary ranges from 49,000to49,000 to 49,000to99,000
• Job market is expected to grow

Open-Ended Questions

• Discussion of privacy impact of large databases and networks; laws defining online identity
• Definition of security; concepts of computer crime, social engineering, malware, malicious hardware
• Ways to protect computer security (restrictions, encryption, disaster anticipation, data loss prevention)
• Defining computer ethics, copyright law, cyberbullying, plagiarism

A Look to the Future

• Most modern forum and comment areas allow anonymous posting
• Future software can identify and track activity like shopping
• Security cameras can update online identities (tracking paths in malls)

Explore the critical issues surrounding privacy, security, and ethics in computing. This quiz discusses topics like data accuracy, ownership, and access concerns in the context of big data and personal information. Understand the implications of data collection by large organizations and the role of information resellers.