Security Issues in Information Technology Ashima Wadhwa

What is ? SECURITY Dictionary.com says: 1. Freedom from risk or danger; safety. 2. Freedom from doubt, anxiety, or fear; confidence. 3. Something that gives or assures safety, as: 1. A group or department of private guards: Call building security if a visitor acts suspicious. 2. Measures adopted by a government to prevent espionage, sabotage, or attack. …etc.

Provide authentication and access control for resources Why do we need ? SECURITY Protect vital information while still allowing access to those who need it Trade secrets, medical records, etc. Provide authentication and access control for resources Guarantee availability of resources

Information Security Services Confidentiality Integrity Authentication Nonrepudiation Access Control Availability

Information Security Services Confidentiality Maintaining the privacy of data Integrity Detecting that the data is not tampered with Authentication Establishing proof of identity Nonrepudiation Ability to prove that the sender actually sent the data Access Control Access to information resources are regulated Availability Computer assets are available to authorized parties when needed Confidentiality Integrity Authentication Ensures that the origin of a message is correctly identified, with an assurance that the identity is not false Nonrepudiation Neither the sender nor the receiver of a message is able to deny the transmission Access Control Availability

Security measures Fire wall Digital Certificate /Signature Encryption Anti virus

Firewall A firewall stops information being changed or stolen It limits entry into a network to authorised users and content Entry can then be controlled by registration and password But employees represent the biggest single threat to networks Employees have access to security procedures and know where important data is stored

Digital Certificates / Signature Use of digital certificates: Secret key (symmetric) encryption (both parties have an identical key known only to them, but not a safe method) Public key (asymmetric) encryption (keys used by sender and receiver are different but related by a numerical code Digital signatures used to create commercial systems using public key encryption often using trusted third parties to send owner identification and copy of public key

Digital Certificates / Signature Digital certificates may include: User identification data Issuing authority identification and digital signature User’s public key Expiry date of certificate Class of certificate Digital identification code for the certificate

ENCRYPTION In cryptography, encryption is the process of transforming information (referred to as plaintext) using an algorithm (called a cipher) to make it unreadable to anyone except those possessing special knowledge, usually referred to as a key. The reverse process, i.e., to make the encrypted information readable again, is referred to as DECRYPTION.

ENCRYPTION: USES Encryption can be used to protect data "at rest", such as files on computers and storage devices (e.g. USB flash drives).  Digital rights management systems which prevent unauthorized use or reproduction of copyrighted material and protect software against reverse engineering  Encryption is also used to protect data in transit Encryption, by itself, can protect the confidentiality of messages.

Viruses Computer programs that corrupt or delete files Sent as attachments or embedded in other files Worm Can spread itself over a network, doesn’t need to be sent

Types of virus Attaches itself to specific program Transient virus Attaches itself to specific program Is run every time the program is run Resident virus Once loaded operates for duration of computer’s use Logic bomb Triggers when a given condition is met, such as clock on computer matching a specified time Trojan horse Malicious program that hides within a friendly program

  What is an Anti-Virus? Anti-virus is a software (computer program) that scans files or your computer's memory for certain patterns that may indicate an infection. The patterns it looks for are based on the signatures, or fingerprints, of known viruses. Once a virus is detected in the wild, the Anti-Virus companies then release these new patterns for your Anti-virus software to use. These updates come out daily by some vendors. Virus authors are continually releasing new and updated viruses, so it is important that you have the latest definitions installed on your computer.

What is an Anti-Virus? Once you have installed an anti-virus package, you should scan your entire computer periodically. Always leave your Anti-virus software running so it can provide constant protection. Automatic scans- Depending what software you choose, you may be able to configure it to automatically scan specific files or directories and prompt you at set intervals to perform complete scans.

ELEMENTS OF A COMPREHENSIVE SECURITY PROGRAM Principles Have Good Passwords Use Good Antiviral Products Use Good Cryptography Have Good Firewalls Have a Backup System Audit and Monitor Systems and Networks Have Training and Awareness Programs Test Your Security Frequently INTRUSION DETECTION SYSTEM Immediate alerts on security-relevant activities Statistical analyses to establish norms Alerts on variations from norms

Thank You!!