Protecting Personally Identifiable Information (PII)

Protecting Personally Identifiable Information (PII)

• PII can be collected through devices, websites, and detection hardware and software that track movements and location.
• Safeguarding PII is a key responsibility of citizenship in a digital world.

Authentication Measures

• One-step authentication measures use email and password to secure information.
• Strong passwords should be:
  • At least 8-12 characters long
  • Include capitalized letters
  • Include lowercase letters
  • Include numbers
  • Include symbols
  • Avoid personal identifiable information (e.g. birthday or name)
  • Not be words found in a dictionary
• Multi-factor authentication provides more than one layer of security, using a minimum of two steps to access a virtual space.
• Examples of multi-factor authentication include:
  • Choosing and identifying a security image
  • reCAPTCHA identification
  • Identifying pictures with a common image in them
  • Answering security questions

Disadvantages of Accessible PII

• Negative consequences of accessible PII include:
  • Credit card information getting into the wrong hands
  • Web browsers tracking search history and preferences
  • Location information being collected
  • Information being used to stalk or steal identities

Protecting PII

• All systems have flaws, so software is needed to protect against cyber attacks.
• Recommendations for protection software include:
  • Kaspersky Anti-Virus
  • AVG Anti-Virus
  • Norton 360 Deluxe Malware Protection
  • ESET Cybersecurity
• Limit permission settings when allowing websites access to personal information.
• Password managers can generate complex, random passwords for online accounts.

Cybersecurity Awareness

• Be aware of where your digital footprint is to keep data secure.
• Cyber attacks include dictionary attacks, brute force attacks, and more.
• Hackers can be categorized as:
  • White hat hackers (ethical hackers who test systems and protect against attacks)
  • Black hat hackers (criminals who use their skills for personal gain)
  • Grey hat hackers (individuals with a combination of white and black hat ethics)

Types of Attacks

• Malware refers to malicious software, including viruses, worms, spyware, and ransomware.
• Viruses are specialized computer programs that replicate and insert their code into a new host.
• Phishing is a type of cyber attack that uses disguised emails to trick recipients into providing personal information.
• Keylogging attacks use software or hardware to track keystrokes and gain access to usernames, passwords, and other information.

Public Network Insecurities

• Public networks are especially dangerous to cybersecurity because data can be easily accessed by hackers.
• Rogue access points can be created by hackers to steal personal information.

Digital Files

• Digital files have benefits, including:
  • Time-saving in editing and transferring files
  • Better efficiency in record-keeping
  • Easier access to files
• However, digital files also have limitations and risks, including:
  • Security breaches
  • File insecurity
  • Losing or corrupting information

File Security

• File security is a feature of the file system that controls access and limits what users can do to files.
• Effects of file insecurity include losing, overriding, or corrupting information.
• Steps to ensure file security include:
  • Keeping computers and devices updated
  • Using strong passwords
  • Using anti-virus software
  • Encrypting hard drives and mobile devices
  • Restricting access to files

Five Pillars of Cybersecurity

• The five pillars are:
  • Confidentiality (ensuring information is not disclosed to the wrong individuals)
  • Integrity (ensuring information is not damaged or modified during transmission)
  • Availability (ensuring services are accessible to users)
  • Non-repudiation (proving the identities of the sender and recipient)
  • Authentication (confirming identities before allowing access to cyber services)### Password Entropy
• Formula to calculate password entropy: log2(SL)
• S: Size of the pool of unique possible symbols
• L: Password Length
• Example: 6-character password with 26 possible symbols (all lowercase letters)
  • Possible combinations: 26^6 = 308,915,776
  • Bits of entropy: log2(26^6) = 28.2

Encryption and Decryption

• Encryption: process of changing plaintext (original message) to ciphertext (encrypted text) for security
• Decryption: process of converting ciphertext back to plaintext using a key

Downfalls of Computing

• Intentional misuse (cybercrime): using computing to commit crimes, e.g. fraud, hacking, identity theft, malware, phishing, cyberstalking
• Unintentional negative side effects: programmer bias, algorithmic bias, privacy infringement, inequitable access to technology and the internet

Cyber Attacks

• Dictionary attacks: using algorithms to try common words and variations for passwords
• Brute force attacks: using software to generate many password guesses based on user information
• Denial of Service (DoS) attacks: overwhelming a network server with traffic to prevent legitimate access
• Distributed Denial of Service (DDoS) attacks: using multiple devices to attack a single target

Unintended Consequences

• Programmer bias: unintended consequences due to programmers' own biases and limited testing
• Algorithmic bias: systematic errors in computer systems that create unfair outcomes
• Privacy infringement: collection and use of personal data without consent
• Digital Divide: unequal access to technology and the internet due to infrastructure, geographic barriers, government restrictions, and socioeconomic status

Solutions to the Digital Divide

• Increase affordability of internet access and devices
• Develop more infrastructure for global connectivity
• Create informational resources for low-cost devices and internet access

Programmer Responsibilities

• Code of Ethics: guidelines for programmers to promote accountability and transparency
• Mitigating negative impacts of computing: programmer bias, algorithmic bias, privacy infringement, and digital divide

Legal Issues in Computing

• Digital Millennium Copyright Act (DMCA): protects copyrighted material online and provides safe harbor for web hosts and ISPs
• Intellectual property: creative works or inventions that can be patented, copyrighted, or trademarked
• Plagiarism: taking someone else's work or ideas without proper citation
• Creative Commons: non-profit organization promoting open sharing and collaboration of creative works
• Open Source: materials and software allowing others to build upon and adapt
• Open Access: providing free online access to informational materials and research for the greater good### History of Cryptography
• During World War II, the German army used the Enigma machine to encrypt messages to their generals.
• The Polish Cipher Bureau broke the code, allowing Allied code breakers to decrypt the German messages and predict the German army's movements.

Modern Cryptography

• Cryptography is the science of storing data securely in the digital age.
• Four important categories must be maintained when storing information virtually: confidentiality, authenticity, integrity, and ownership.
• Cryptography uses concepts like encryption and decryption to store data securely.

Encryption Explained

• Encryption is the process of changing a message or information to hide its true meaning.
• Plaintext (original message) is turned into ciphertext (encrypted text) for security.
• An encrypted message requires a key to be decrypted.
• Certificate authorities issue digital certificates that validate the ownership of encryption keys used in secure communications.

Decryption Explained

• Decryption takes the encrypted message and converts it back to the original plaintext.
• The key is needed to decrypt the message.

Encoding and Decoding

• Encoding refers to the algorithm that changes plaintext into ciphertext.
• Decoding algorithms are used to convert ciphertext back into plaintext.
• Encoding and decoding algorithms are consistent and public information.
• Encryption keys are needed to secure the encoded data.

Symmetric Key Encryption

• Symmetric key encryption uses one key for both encryption and decryption.
• Advantages: fast and efficient for secure data storage.
• Disadvantages: trust issues and key security can be a challenge since the key can exist with multiple parties or companies.

Public Key Encryption

• Public key encryption uses different keys for encryption and decryption.
• A public key is used to encrypt a message, and a private key is used to decrypt it.
• Example: Bob sends a message to Alice, encrypting it with her public key, and she decrypts it with her private key.

Why is Encryption Necessary?

• Encryption is necessary to protect sensitive information from unauthorized access.
• Examples: ATM transactions, military communications, and website data storage.

Encryption Methods

• Transposition Encryption: changes the position of letters in a message.
• Substitution Encryption: replaces letters in a message with new letters, characters, or numbers (cipher text).
• Examples of Substitution Encryption: T9 Texting and Caesar Cipher.

Substitution Methods

• T9 Texting: uses numbers associated with letters on a telephone keypad to write words.
• Caesar Cipher: a simple encryption method that shifts letters in the plaintext by a certain number of positions.
• Caesar Cipher uses a shift as its key, and the shift determines the letter substitution.

Caesar Cipher Shift

• The shift in the Caesar Cipher determines the letter substitution.
• Example: if the shift is 3, A is substituted for D, B for E, and so on.
• If the shift is 5, F would correspond to A, G to B, and so on through the alphabet.

Protecting Personally Identifiable Information (PII)

• PII can be collected through devices, websites, and detection hardware and software that track movements and location.
• Safeguarding PII is a key responsibility of citizenship in a digital world.

Authentication Measures

• One-step authentication measures use email and password to secure information.
• Strong passwords should be:
  • At least 8-12 characters long
  • Include capitalized letters
  • Include lowercase letters
  • Include numbers
  • Include symbols
  • Avoid personal identifiable information (e.g. birthday or name)
  • Not be words found in a dictionary
• Multi-factor authentication provides more than one layer of security, using a minimum of two steps to access a virtual space.
• Examples of multi-factor authentication include:
  • Choosing and identifying a security image
  • reCAPTCHA identification
  • Identifying pictures with a common image in them
  • Answering security questions

Disadvantages of Accessible PII

• Negative consequences of accessible PII include:
  • Credit card information getting into the wrong hands
  • Web browsers tracking search history and preferences
  • Location information being collected
  • Information being used to stalk or steal identities

Protecting PII

• All systems have flaws, so software is needed to protect against cyber attacks.
• Recommendations for protection software include:
  • Kaspersky Anti-Virus
  • AVG Anti-Virus
  • Norton 360 Deluxe Malware Protection
  • ESET Cybersecurity
• Limit permission settings when allowing websites access to personal information.
• Password managers can generate complex, random passwords for online accounts.

Cybersecurity Awareness

• Be aware of where your digital footprint is to keep data secure.
• Cyber attacks include dictionary attacks, brute force attacks, and more.
• Hackers can be categorized as:
  • White hat hackers (ethical hackers who test systems and protect against attacks)
  • Black hat hackers (criminals who use their skills for personal gain)
  • Grey hat hackers (individuals with a combination of white and black hat ethics)

Types of Attacks

• Malware refers to malicious software, including viruses, worms, spyware, and ransomware.
• Viruses are specialized computer programs that replicate and insert their code into a new host.
• Phishing is a type of cyber attack that uses disguised emails to trick recipients into providing personal information.
• Keylogging attacks use software or hardware to track keystrokes and gain access to usernames, passwords, and other information.

Public Network Insecurities

• Public networks are especially dangerous to cybersecurity because data can be easily accessed by hackers.
• Rogue access points can be created by hackers to steal personal information.

Digital Files

• Digital files have benefits, including:
  • Time-saving in editing and transferring files
  • Better efficiency in record-keeping
  • Easier access to files
• However, digital files also have limitations and risks, including:
  • Security breaches
  • File insecurity
  • Losing or corrupting information

File Security

• File security is a feature of the file system that controls access and limits what users can do to files.
• Effects of file insecurity include losing, overriding, or corrupting information.
• Steps to ensure file security include:
  • Keeping computers and devices updated
  • Using strong passwords
  • Using anti-virus software
  • Encrypting hard drives and mobile devices
  • Restricting access to files

Five Pillars of Cybersecurity

• The five pillars are:
  • Confidentiality (ensuring information is not disclosed to the wrong individuals)
  • Integrity (ensuring information is not damaged or modified during transmission)
  • Availability (ensuring services are accessible to users)
  • Non-repudiation (proving the identities of the sender and recipient)
  • Authentication (confirming identities before allowing access to cyber services)### Password Entropy
• Formula to calculate password entropy: log2(SL)
• S: Size of the pool of unique possible symbols
• L: Password Length
• Example: 6-character password with 26 possible symbols (all lowercase letters)
  • Possible combinations: 26^6 = 308,915,776
  • Bits of entropy: log2(26^6) = 28.2

Encryption and Decryption

• Encryption: process of changing plaintext (original message) to ciphertext (encrypted text) for security
• Decryption: process of converting ciphertext back to plaintext using a key

Downfalls of Computing

• Intentional misuse (cybercrime): using computing to commit crimes, e.g. fraud, hacking, identity theft, malware, phishing, cyberstalking
• Unintentional negative side effects: programmer bias, algorithmic bias, privacy infringement, inequitable access to technology and the internet

Cyber Attacks

• Dictionary attacks: using algorithms to try common words and variations for passwords
• Brute force attacks: using software to generate many password guesses based on user information
• Denial of Service (DoS) attacks: overwhelming a network server with traffic to prevent legitimate access
• Distributed Denial of Service (DDoS) attacks: using multiple devices to attack a single target

Unintended Consequences

• Programmer bias: unintended consequences due to programmers' own biases and limited testing
• Algorithmic bias: systematic errors in computer systems that create unfair outcomes
• Privacy infringement: collection and use of personal data without consent
• Digital Divide: unequal access to technology and the internet due to infrastructure, geographic barriers, government restrictions, and socioeconomic status

Solutions to the Digital Divide

• Increase affordability of internet access and devices
• Develop more infrastructure for global connectivity
• Create informational resources for low-cost devices and internet access

Programmer Responsibilities

• Code of Ethics: guidelines for programmers to promote accountability and transparency
• Mitigating negative impacts of computing: programmer bias, algorithmic bias, privacy infringement, and digital divide

Legal Issues in Computing

• Digital Millennium Copyright Act (DMCA): protects copyrighted material online and provides safe harbor for web hosts and ISPs
• Intellectual property: creative works or inventions that can be patented, copyrighted, or trademarked
• Plagiarism: taking someone else's work or ideas without proper citation
• Creative Commons: non-profit organization promoting open sharing and collaboration of creative works
• Open Source: materials and software allowing others to build upon and adapt
• Open Access: providing free online access to informational materials and research for the greater good### History of Cryptography
• During World War II, the German army used the Enigma machine to encrypt messages to their generals.
• The Polish Cipher Bureau broke the code, allowing Allied code breakers to decrypt the German messages and predict the German army's movements.

Modern Cryptography

• Cryptography is the science of storing data securely in the digital age.
• Four important categories must be maintained when storing information virtually: confidentiality, authenticity, integrity, and ownership.
• Cryptography uses concepts like encryption and decryption to store data securely.

Encryption Explained

• Encryption is the process of changing a message or information to hide its true meaning.
• Plaintext (original message) is turned into ciphertext (encrypted text) for security.
• An encrypted message requires a key to be decrypted.
• Certificate authorities issue digital certificates that validate the ownership of encryption keys used in secure communications.

Decryption Explained

• Decryption takes the encrypted message and converts it back to the original plaintext.
• The key is needed to decrypt the message.

Encoding and Decoding

• Encoding refers to the algorithm that changes plaintext into ciphertext.
• Decoding algorithms are used to convert ciphertext back into plaintext.
• Encoding and decoding algorithms are consistent and public information.
• Encryption keys are needed to secure the encoded data.

Symmetric Key Encryption

• Symmetric key encryption uses one key for both encryption and decryption.
• Advantages: fast and efficient for secure data storage.
• Disadvantages: trust issues and key security can be a challenge since the key can exist with multiple parties or companies.

Public Key Encryption

• Public key encryption uses different keys for encryption and decryption.
• A public key is used to encrypt a message, and a private key is used to decrypt it.
• Example: Bob sends a message to Alice, encrypting it with her public key, and she decrypts it with her private key.

Why is Encryption Necessary?

• Encryption is necessary to protect sensitive information from unauthorized access.
• Examples: ATM transactions, military communications, and website data storage.

Encryption Methods

• Transposition Encryption: changes the position of letters in a message.
• Substitution Encryption: replaces letters in a message with new letters, characters, or numbers (cipher text).
• Examples of Substitution Encryption: T9 Texting and Caesar Cipher.

Substitution Methods

• T9 Texting: uses numbers associated with letters on a telephone keypad to write words.
• Caesar Cipher: a simple encryption method that shifts letters in the plaintext by a certain number of positions.
• Caesar Cipher uses a shift as its key, and the shift determines the letter substitution.

Caesar Cipher Shift

• The shift in the Caesar Cipher determines the letter substitution.
• Example: if the shift is 3, A is substituted for D, B for E, and so on.
• If the shift is 5, F would correspond to A, G to B, and so on through the alphabet.

Protecting Personally Identifiable Information (PII)

• PII can be collected through devices, websites, and detection hardware and software that track movements and location.
• Safeguarding PII is a key responsibility of citizenship in a digital world.

Authentication Measures

• One-step authentication measures use email and password to secure information.
• Strong passwords should be:
  • At least 8-12 characters long
  • Include capitalized letters
  • Include lowercase letters
  • Include numbers
  • Include symbols
  • Avoid personal identifiable information (e.g. birthday or name)
  • Not be words found in a dictionary
• Multi-factor authentication provides more than one layer of security, using a minimum of two steps to access a virtual space.
• Examples of multi-factor authentication include:
  • Choosing and identifying a security image
  • reCAPTCHA identification
  • Identifying pictures with a common image in them
  • Answering security questions

Disadvantages of Accessible PII

• Negative consequences of accessible PII include:
  • Credit card information getting into the wrong hands
  • Web browsers tracking search history and preferences
  • Location information being collected
  • Information being used to stalk or steal identities

Protecting PII

• All systems have flaws, so software is needed to protect against cyber attacks.
• Recommendations for protection software include:
  • Kaspersky Anti-Virus
  • AVG Anti-Virus
  • Norton 360 Deluxe Malware Protection
  • ESET Cybersecurity
• Limit permission settings when allowing websites access to personal information.
• Password managers can generate complex, random passwords for online accounts.

Cybersecurity Awareness

• Be aware of where your digital footprint is to keep data secure.
• Cyber attacks include dictionary attacks, brute force attacks, and more.
• Hackers can be categorized as:
  • White hat hackers (ethical hackers who test systems and protect against attacks)
  • Black hat hackers (criminals who use their skills for personal gain)
  • Grey hat hackers (individuals with a combination of white and black hat ethics)

Types of Attacks

• Malware refers to malicious software, including viruses, worms, spyware, and ransomware.
• Viruses are specialized computer programs that replicate and insert their code into a new host.
• Phishing is a type of cyber attack that uses disguised emails to trick recipients into providing personal information.
• Keylogging attacks use software or hardware to track keystrokes and gain access to usernames, passwords, and other information.

Public Network Insecurities

• Public networks are especially dangerous to cybersecurity because data can be easily accessed by hackers.
• Rogue access points can be created by hackers to steal personal information.

Digital Files

• Digital files have benefits, including:
  • Time-saving in editing and transferring files
  • Better efficiency in record-keeping
  • Easier access to files
• However, digital files also have limitations and risks, including:
  • Security breaches
  • File insecurity
  • Losing or corrupting information

File Security

• File security is a feature of the file system that controls access and limits what users can do to files.
• Effects of file insecurity include losing, overriding, or corrupting information.
• Steps to ensure file security include:
  • Keeping computers and devices updated
  • Using strong passwords
  • Using anti-virus software
  • Encrypting hard drives and mobile devices
  • Restricting access to files

Five Pillars of Cybersecurity

• The five pillars are:
  • Confidentiality (ensuring information is not disclosed to the wrong individuals)
  • Integrity (ensuring information is not damaged or modified during transmission)
  • Availability (ensuring services are accessible to users)
  • Non-repudiation (proving the identities of the sender and recipient)
  • Authentication (confirming identities before allowing access to cyber services)### Password Entropy
• Formula to calculate password entropy: log2(SL)
• S: Size of the pool of unique possible symbols
• L: Password Length
• Example: 6-character password with 26 possible symbols (all lowercase letters)
  • Possible combinations: 26^6 = 308,915,776
  • Bits of entropy: log2(26^6) = 28.2

Encryption and Decryption

• Encryption: process of changing plaintext (original message) to ciphertext (encrypted text) for security
• Decryption: process of converting ciphertext back to plaintext using a key

Downfalls of Computing

• Intentional misuse (cybercrime): using computing to commit crimes, e.g. fraud, hacking, identity theft, malware, phishing, cyberstalking
• Unintentional negative side effects: programmer bias, algorithmic bias, privacy infringement, inequitable access to technology and the internet

Cyber Attacks

• Dictionary attacks: using algorithms to try common words and variations for passwords
• Brute force attacks: using software to generate many password guesses based on user information
• Denial of Service (DoS) attacks: overwhelming a network server with traffic to prevent legitimate access
• Distributed Denial of Service (DDoS) attacks: using multiple devices to attack a single target

Unintended Consequences

• Programmer bias: unintended consequences due to programmers' own biases and limited testing
• Algorithmic bias: systematic errors in computer systems that create unfair outcomes
• Privacy infringement: collection and use of personal data without consent
• Digital Divide: unequal access to technology and the internet due to infrastructure, geographic barriers, government restrictions, and socioeconomic status

Solutions to the Digital Divide

• Increase affordability of internet access and devices
• Develop more infrastructure for global connectivity
• Create informational resources for low-cost devices and internet access

Programmer Responsibilities

• Code of Ethics: guidelines for programmers to promote accountability and transparency
• Mitigating negative impacts of computing: programmer bias, algorithmic bias, privacy infringement, and digital divide

Legal Issues in Computing

• Digital Millennium Copyright Act (DMCA): protects copyrighted material online and provides safe harbor for web hosts and ISPs
• Intellectual property: creative works or inventions that can be patented, copyrighted, or trademarked
• Plagiarism: taking someone else's work or ideas without proper citation
• Creative Commons: non-profit organization promoting open sharing and collaboration of creative works
• Open Source: materials and software allowing others to build upon and adapt
• Open Access: providing free online access to informational materials and research for the greater good### History of Cryptography
• During World War II, the German army used the Enigma machine to encrypt messages to their generals.
• The Polish Cipher Bureau broke the code, allowing Allied code breakers to decrypt the German messages and predict the German army's movements.

Modern Cryptography

• Cryptography is the science of storing data securely in the digital age.
• Four important categories must be maintained when storing information virtually: confidentiality, authenticity, integrity, and ownership.
• Cryptography uses concepts like encryption and decryption to store data securely.

Encryption Explained

• Encryption is the process of changing a message or information to hide its true meaning.
• Plaintext (original message) is turned into ciphertext (encrypted text) for security.
• An encrypted message requires a key to be decrypted.
• Certificate authorities issue digital certificates that validate the ownership of encryption keys used in secure communications.

Decryption Explained

• Decryption takes the encrypted message and converts it back to the original plaintext.
• The key is needed to decrypt the message.

Encoding and Decoding

• Encoding refers to the algorithm that changes plaintext into ciphertext.
• Decoding algorithms are used to convert ciphertext back into plaintext.
• Encoding and decoding algorithms are consistent and public information.
• Encryption keys are needed to secure the encoded data.

Symmetric Key Encryption

• Symmetric key encryption uses one key for both encryption and decryption.
• Advantages: fast and efficient for secure data storage.
• Disadvantages: trust issues and key security can be a challenge since the key can exist with multiple parties or companies.

Public Key Encryption

• Public key encryption uses different keys for encryption and decryption.
• A public key is used to encrypt a message, and a private key is used to decrypt it.
• Example: Bob sends a message to Alice, encrypting it with her public key, and she decrypts it with her private key.

Why is Encryption Necessary?

• Encryption is necessary to protect sensitive information from unauthorized access.
• Examples: ATM transactions, military communications, and website data storage.

Encryption Methods

• Transposition Encryption: changes the position of letters in a message.
• Substitution Encryption: replaces letters in a message with new letters, characters, or numbers (cipher text).
• Examples of Substitution Encryption: T9 Texting and Caesar Cipher.

Substitution Methods

• T9 Texting: uses numbers associated with letters on a telephone keypad to write words.
• Caesar Cipher: a simple encryption method that shifts letters in the plaintext by a certain number of positions.
• Caesar Cipher uses a shift as its key, and the shift determines the letter substitution.

Caesar Cipher Shift

• The shift in the Caesar Cipher determines the letter substitution.
• Example: if the shift is 3, A is substituted for D, B for E, and so on.
• If the shift is 5, F would correspond to A, G to B, and so on through the alphabet.