Security, Privacy, and Ethical Issues in Information Systems and the Internet

Chapter 14

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 1

Principles and Learning Objectives

• Policies and procedures must be established to avoid computer waste and mistakes.

– Describe some examples of waste and mistakes in an IS environment, their causes, and possible solutions.

– Identify policies and procedures useful in eliminating waste and mistakes.

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 2

Principles and Learning Objectives

• Computer crime is a serious and rapidly growing area of concern requiring management attention.

– Explain the types and effects of computer crime.

– Identify specific measures to prevent computer crime.

– Discuss the principles and limits of an individual’s right to privacy.

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 3

Principles and Learning Objectives

• Jobs, equipment, and working conditions must be designed to avoid negative health effects.

– List the important effects of computers on the work environment.

– Identify specific actions that must be taken to ensure the health and safety of employees.

– Outline criteria for the ethical use of information systems.

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 4

Social Issues in Information Systems

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 5

Computer Waste & Mistakes

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 6

Computer Waste

• Discard technology • Unused systems • Personal use of corporate time and technology MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 7

Preventing Computer Waste and Mistakes

• Establish Policies and Procedures • Implement Policies and Procedures • Monitor Policies and Procedures • Review Policies and Procedures MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 8

Preventing Computer-Related Waste and Mistakes

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 9

Implementing Policies and Procedures

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 10

Computer Crime

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 11

Number of Incidents Reported to CERT

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 12

Computer Crime and Security Survey

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 13

The Computer as a Tool to Commit Crime

• Social engineering • Dumpster diving • Identity theft • Cyberterrorism MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 14

Computers as Objects of Crime

• Illegal access and use – Hackers vs. crackers – Script bunnies – Insiders MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 15

Illegal Access and Use

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 16

Data Alteration and Destruction

• Virus – Application virus – System virus – Macro virus • Worm • Logic bomb MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 17

Data Alteration and Destruction

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 18

Top Viruses – July 2002

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 19

Top Viruses – July 2002

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 20

Computers as Objects of Crime

• Information and equipment theft • Software and Internet piracy • Computer-related scams • International computer crime MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 21

Preventing Computer-Related Crime

• Crime prevention by state and federal agencies • Crime prevention by corporations – Public Key Infrastructure (PKI) – Biometrics • Antivirus programs MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 22

Preventing Computer-Related Crime

• Intrusion Detection Software • Managed Security Service Providers (MSSPs) • Internet Laws for Libel and Protection of Decency MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 23

Preventing Crime on the Internet

• Develop effective Internet and security policies • Use a stand-alone firewall with network monitoring capabilities • Monitor managers and employees • Use Internet security specialists to perform audits MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 24

Common Methods Used to Commit Computer Crimes

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 25

How to Protect Your Corporate Data from Hackers

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 26

Privacy

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 27

Privacy Issues

• Privacy and the Federal Government • Privacy at work • E-mail privacy • Privacy and the Internet MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 28

Using Antivirus Programs

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 29

Fairness and Information Use

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 30

Federal Privacy Laws and Regulations

• The Privacy Act of 1979 • Gramm-Leach-Bliley Act • USA Patriot Act MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 31

Other Federal Privacy Laws

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 32

Other Federal Privacy Laws

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 33

The Work Environment

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 34

Health Concerns

• Repetitive stress injury (RSI) • Carpal tunnel syndrome (CTS) • Ergonomics MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 35

Avoiding Health and Environment Problems

• Maintain good posture and positioning.

• Don’t ignore pain or discomfort.

• Use stretching and strengthening exercises.

• Find a good physician who is familiar with RSI and how to treat it.

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 36

Medical Topics on the Internet

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 37

Ethical Issues in Information Systems

• The AITP Code of Ethics – Obligation to management – Obligation to fellow AITP members – Obligation to society • The ACM Code of Professional Conduct – Acquire and maintain professional competence MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 38

AITP Code of Ethics

MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 39

Summary

•

Computer waste

- the inappropriate use of computer technology and resources in both the public and private sectors •

Software and Internet piracy

- represent the most common computer crime •

Ethics

- determine generally accepted and discouraged activities within a company MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan 40