Done BY: Zainab Sulaiman AL-Mandhari Under Supervisor: Dr.Tarek Computer Security Done BY: Zainab Sulaiman AL-Mandhari Under Supervisor: Dr.Tarek Hello; Thank you Overview of computer security and good computing practices. This is kind-of a whirlwind overview, so the handout that you have has additional information and details about any of the things that I will be talking about.

Outline Definition of Computer Security Why should I care about computer security? Who would want to break into your computer at home? The difference between hackers and crackers What can an attacker do to your computer? Types of Attacks What features should a computer security system provide? Understanding security and safer computing What is ethics? Common Ethical Issues for IT Users The general topics I will be covering are <Read Topics> My expectation is that much of what I cover will be familiar to you, and that’s a good thing. One goal of computer security training is to reinforce and confirm and update good computing practices that people already know about, so they remain in the front of your mind. And then hopefully through the course of this overview there will be a couple of gems or new things that you can take away, as well.

Definition of Computer Security Computer security is the process of preventing and detecting unauthorized use of your computer.

Isn’t this just an IT Problem? <Read slide> And the answer is: Well, not really…

Why should I care about computer security? Protects the information in your computer starting from your system files, personal files, backup files up to your temporary files. Protect fundamental information while still allowing access to those who need it Trade secrets, medical records, etc. Provide authentication and access control for resources. Guarantee availability of resources.

What we have seen so far? Authentication Access control Encryption

Who would want to break into your computer at home? Intruders (also referred to as hackers, attackers, or crackers) may not care about your identity. Often they want to gain control of your computer so they can use it to launch attacks on other computer systems.

The difference between hackers and crackers Hackers- Are people who gain unauthorized access to computer system for the fun and challenge of it Crackers - Is someone who breaks into computers, often to do something hateful such as steal credit card information

What can an attacker do to your computer? a) Hide programs that launch attacks b) Generate large volumes of unwanted traffic, slowing down the entire system c) Distribute illegal software from your computer d) Access controlled information (e.g. identity theft) e) Record all of your keystrokes and get your passwords

Types of Attacks Security events can take many forms, but one of the most frequent is an attack on a networked computer from outside source. Most attacks involve: Viruses Worms Trojan Horses

What features should a computer security system provide? Confidentiality The prevention of unauthorized disclosure of information. Confidentiality is keeping information secret or private. Confidentiality might be important for military, business or personal reasons. Integrity Integrity is the unauthorized writing or modification of information. Integrity means that there is an external consistency in the system - everything is as it is expected to be. Data integrity means that the data stored on a computer is the same as the source documents. Availability Information should be accessible and useable upon appropriate demand by an authorized user. Availability is the prevention of unauthorized withholding of information. Denial of service attacks are a common form of attack.

Understanding security and safer computing These are ways to help protect your computer against potential security threats: Firewall. A firewall can help protect your computer by preventing hackers or malicious software from gaining access to it. Virus protection. Antivirus software can help protect your computer against viruses, worms, and other security threats. Spyware and other malware protection. Antispyware software can help protect your computer from spyware and other potentially unwanted software. Windows Update. Windows can routinely check for updates for your computer and install them automatically.

How a firewall work

Instructions for safely using e‑mail and the web Use care when opening e‑mail attachments. Guard your personal information carefully. Be careful when clicking hyperlinks in e‑mail messages.

What is ethics? Ethics is concerned with what is good for individuals and society and is also described as moral philosophy.

Common Ethical Issues for IT Users Inappropriate Sharing of Information Organizations stored huge amount of information that can be classified as private or confidential. Private data describes individual employees (for example, salary, attendance, performance rating, health record). Confidential information describes a company and its operations: sales, promotion plans, research and development.

Cont :Common Ethical Issues for IT Users Supporting The Ethical Practices of IT Users Companies must develop, communicate and implement written guidelines that encourage employees to respect business IT resources and use them to enhance their job performance.

Cont: Common Ethical Issues for IT Users Establishing Guidelines for Use of Company Software Company IT managers must provide clear rules that rule the use of home computers and associated software. The goal should be to ensure that employees have legal copies of all software

Cont: Common Ethical Issues for IT Users Structuring Information Systems to Protect Data and Information Employees should be illegal from accessing the data about research and development results.

Cont: Common Ethical Issues for IT Users Installing and Maintaining a Corporate Firewall Firewall is a software or hardware device that serves as a barrier between a company and the outside world and limits access to the company’s network based on the Internet usage policy.