Presentation is loading. Please wait.

Presentation is loading. Please wait.

Subject Name: MANAGEMENT INFORMATION SYSTEM Subject Code:10IS72

Published byFerdinand Marsh Modified over 6 years ago

Similar presentations

Presentation on theme: "Subject Name: MANAGEMENT INFORMATION SYSTEM Subject Code:10IS72"— Presentation transcript:

1 Subject Name: MANAGEMENT INFORMATION SYSTEM Subject Code:10IS72
Prepared By: HARKIRANPREET Department: ISE Date: 12 November, 2014 5/10/14

2 SECURITY AND ETHICAL CHALLENGES
UNIT 7 SECURITY AND ETHICAL CHALLENGES 5/10/14

3 LEARNING OBJECTIVES Identify several ethical issues regarding how the use of information technologies in business affects Employment Individuality Working conditions Privacy Crime Health Solutions to societal problems 5/10/14

4 CONTD… Identify several types of security management strategies and defenses Explain how they can be used to ensure the security of business applications of information technology Propose ways that business managers and professionals can help lessen the harmful effects, and increase the beneficial effects, of the use of information technology 5/10/14

5 IT SECURITY, ETHICS, AND SOCIETY
Information technology has both beneficial and detrimental effects on society and people Manage work activities to minimize the detrimental effects Strive to optimize the beneficial effects 5/10/14

6 BUSINESS ETHICS Ethical responsibilities of business professionals
Promote ethical uses of information technology Accept the ethical responsibilities of your job Properly perform your role as a human resource Consider the ethical dimensions of activities and decisions 5/10/14

7 IT SECURITY, ETHICS, AND SOCIETY
5/10/14

8 CATEGORIES OF ETHICAL BUSINESS ISSUES
5/10/14

9 CORPORATE SOCIAL RESPONSIBILITY THEORIES
Stockholder Theory Social Contract Theory Stakeholder Theory Managers are agents of stockholders. Their ethical responsibility is to increase profits without violating laws or engaging in fraud Companies have an ethical responsibility to all members of society Managers have an ethical responsibility to manage a firm for the benefit of all its stakeholders 5/10/14

10 PRINCIPLES OF TECHNOLOGY ETHICS
5/10/14

11 ETHICAL GUIDELINES OF THE AITP
5/10/14

12 RESPONSIBLE PROFESSIONAL GUIDELINES
A responsible professional Acts with integrity Increases personal competence Sets high standards of personal performance Accepts responsibility for his/her work Advances the health, privacy, and general welfare of the public 5/10/14

13 COMPUTER CRIME Unauthorized use, access, modification, or destruction of hardware, software, data, or network resources The unauthorized release of information The unauthorized copying of software Denying an end user access to his/her own hardware, software, data, or network resources Using or conspiring to use computer or network resources illegally to obtain information or tangible property 5/10/14

14 CORPORATE PROTECTION MECHANISMS
5/10/14

15 HACKING Hacking The obsessive use of computers
Unauthorized access/use of networked computers Breaking and Entering Hacking into a computer system and reading files, but neither stealing nor damaging anything Cracker A malicious or criminal hacker who maintains knowledge of vulnerabilities found for private advantage 5/10/14

16 COMMON HACKING TACTICS
5/10/14

17 Many computer crimes involve theft of money
CYBER THEFT Many computer crimes involve theft of money Most are “inside jobs” that involve unauthorized network entry and alteration of databases to cover the tracks of the employees involved Many attacks occur through the Internet Most companies don’t reveal that they have been targets or victims of cyber crime 5/10/14

18 CYBER TERRORISM Examples of Cyberterrorism
The leveraging of an organization’s or government’s computers and information Particularly through the Internet To cause physical, real-world harm or severe disruption of infrastructure Can have serious, large-scale influence Can weaken a country’s economy Can affect Internet-based businesses Examples of Cyberterrorism Life-support at Antarctic research station turned off Release of untreated sewage into waterways Nonessential systems shut down in nuclear power plants Estonian government ministry and banks knocked offline No successful attacks reported yet in the U.S. 5/10/14

19 UNAUTHORIZED USE AT WORK
Unauthorized use of computer systems and networks is time and resource theft Doing private consulting Doing personal finances Playing video game. Unauthorized use of Internet or company networks Sniffers Monitor network traffic or capacity to find evidence of improper use 5/10/14

20 INTERNET ABUSES IN THE WORKPLACE
General abuses Unauthorized use and access Unauthorized use and access Copyright infringement Plagiarism Newsgroup postings Transmission of confidential data Moonlighting Use of external ISPs Leisure use of Internet Hacking Pornography Non-work-related downloads or upload 5/10/14

21 A third of the software industry’s revenues are lost to piracy
SOFTWARE PIRACY Software Piracy Unauthorized copying of computer programs Licensing Purchasing software is really a payment for a license for fair use Site license allows a certain number of copies Public domain software is not copyrighted A third of the software industry’s revenues are lost to piracy 5/10/14

22 THEFT OF INTELLECTUAL PROPERTY
Copyrighted material Includes music, videos, images, articles, books, and software Copyright Infringement is Illegal Peer-to-peer networking techniques have made it easy to trade pirated intellectual property Publishers Offer Inexpensive Online Music Illegal downloading of music and video is down and continues to drop 5/10/14

23 VIRUSES AND WORMS A virus is a program that cannot work without being inserted into another program A worm is a distinct program that can run unaided These programs copy annoying or destructive routines into networked computers Copy routines spread the virus Commonly transmitted through The Internet and online services and file attachments Disks from contaminated computers Shareware 5/10/14

24 THE COST OF VIRUSES, TROJANS, WORMS
Cost of the Top Five Virus Families 115 million computers in 200 countries infected in 2004 Up to 11 million computers permanently infected Total economic damage was $166 to $202 billion in 2004 Average damage per computer is $277 to $366 5/10/14

25 ADWARE AND SPYWARE Adware Spyware
Software that purports to serve a useful purpose, and often does Allows advertisers to display pop-up and banner ads without the consent of the computer user 1. Adware that uses an Internet connection in the background, without the user’s permission or knowledge 2. Captures information about the user and sends it over the Internet 5/10/14

26 PRIVACY ISSUES The power of information technology to store and retrieve information can have a negative effect on every individual’s right to privacy Personal information is collected with every visit to a Web site Confidential information stored by credit bureaus, credit card companies, and the government has been stolen or misused Violation of Privacy Accessing individuals’ private conversations and computer records Collecting and sharing information about individuals gained from their visits to Internet websites Computer Monitoring Always knowing where a person is Mobile and paging services are becoming more closely associated with people than with places 5/10/14

27 PRIVACY LAWS Electronic Communications Privacy Act and Computer Fraud and Abuse Act Prohibit intercepting data communications messages, stealing or destroying data, or trespassing in federal computer systems U.S. Computer Matching and Privacy Act Regulates the matching of data held in federal agency files to verify eligibility for federal programs 5/10/14

28 COMPUTER LIBEL AND CENSORSHIP
The opposite side of the privacy debate… Freedom of information, speech, and press Biggest battlegrounds Bulletin boards boxes Online files of Internet and public networks Weapons used in this battle Spamming Flame mail Libel laws Censorship 5/10/14

29 Encompasses a wide variety of legal and political issues
CYBER LAW Laws intended to regulate activities over the Internet via electronic communication devices Encompasses a wide variety of legal and political issues Includes intellectual property, privacy, freedom of expression, and jurisdiction 5/10/14

30 Cumulative Trauma Disorders (CTDs) Carpal Tunnel Syndrome
HEALTH ISSUES Cumulative Trauma Disorders (CTDs) Disorders suffered by people who sit at a PC or terminal and do fast-paced repetitive keystroke jobs Carpal Tunnel Syndrome Painful, crippling ailment of the hand and wrist Typically requires surgery to cure 5/10/14

31 Designing healthy work environments
ERGONOMICS Designing healthy work environments Safe, comfortable, pleasant place for people to work Increases employee morale and productivity Also called human factors engineering 5/10/14

32 ERGONOMIC FACTORS 5/10/14

33 SOCIETAL SOLUTIONS Medical diagnosis
Using information technologies to solve human and social problems Medical diagnosis Computer-assisted instruction Government program planning Environmental quality control Law enforcement Job placement 5/10/14

34 SECURITY MANAGEMENT OF IT
The Internet was developed for inter-operability, not impenetrability Business managers and professionals alike are responsible for the security, quality, and performance of business information systems Hardware, software, networks, and data resources must be protected by a variety of security measures 5/10/14

35 SECURITY MANAGEMENT The goal of security management is the accuracy, integrity, and safety of all information system processes and resources 5/10/14

36 INTERNETWORKED SECURITY DEFENSES
Encryption Data is transmitted in scrambled form It is unscrambled by computer systems for authorized users only The most widely used method uses a pair of public and private keys unique to each individual 5/10/14

37 PUBLIC/PRIVATE KEY ENCRYPTION
5/10/14

38 INTERNETWORKED SECURITY DEFENSES
Firewalls Gatekeeper system that protects a company’s intranets and other computer networks from intrusion Provides a filter and safe transfer point for access to/from the Internet and other networks Important for individuals who connect to the Internet with DSL or cable modems Can deter hacking, but can’t prevent it 5/10/14

39 INTERNET AND INTRANET FIREWALLS
5/10/14

40 DENIAL OF SERVICE ATTACKS
The victim’s website Denial of service attacks depend on three layers of networked computer systems The victim’s ISP Zombie or slave computers commandeered by cyber criminals 5/10/14

41 DEFENDING AGAINST DENIAL OF SERVICE
At victim’s Website Create backup servers and network connections At the ISP Monitor & block traffic spikes At Zombie machines Set/enforce security policies Scan for vulnerabilities 5/10/14

42 INTERNETWORKED SECURITY DEFENSES
Monitoring Use content monitoring software to scan for troublesome words Virus Defenses Centralize the updating and distribution of antivirus software Use a security suite that integrates virus protection with firewalls, Web security, and content blocking features 5/10/14

43 contd… Security Codes Multilevel password system Encrypted passwords
Smart cards with microprocessors Backup Files Duplicate files of data or programs Security Monitors Monitor the use of computers and networks Protects them from unauthorized use, fraud, and destruction 5/10/14

44 INFORMATION SYSTEM CONTROLS
5/10/14

45 AUDITING IT SECURITY IT Security Audits
Performed by internal or external auditors Review and evaluation of security measures and management policies Goal is to ensure that that proper and adequate measures and policies are in place 5/10/14

46 PROTECTING YOURSELF FROM CYBER CRIME
5/10/14

47 Thank you….. 5/10/14

Download ppt "Subject Name: MANAGEMENT INFORMATION SYSTEM Subject Code:10IS72"

Similar presentations

McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.

McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.
Crime and Security in the Networked Economy Part 4.

Crime and Security in the Networked Economy Part 4.
Security, Privacy, and Ethics Online Computer Crimes.

Security, Privacy, and Ethics Online Computer Crimes.
MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 Hossein BIDGOLI Phishing Email that bites Paying for Privacy Pirates.

MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 Hossein BIDGOLI Phishing that bites Paying for Privacy Pirates.
Chapter 10 Privacy and Security McGraw-Hill

Chapter 10 Privacy and Security McGraw-Hill
1 McGraw-Hill/Irwin Copyright © 2004, The McGraw-Hill Companies, Inc. All rights reserved. Ethical Challenges Ethics Principles of right and wrong that.

1 McGraw-Hill/Irwin Copyright © 2004, The McGraw-Hill Companies, Inc. All rights reserved. Ethical Challenges Ethics Principles of right and wrong that.
McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.

McGraw-Hill/Irwin Copyright © 2008, The McGraw-Hill Companies, Inc. All rights reserved.McGraw-Hill/Irwin Copyright © 2008 The McGraw-Hill Companies, Inc.
1010 CHAPTER PRIVACY AND SECURITY. © 2005 The McGraw-Hill Companies, Inc. All Rights Reserved. 10-2 Competencies Describe concerns associated with computer.

1010 CHAPTER PRIVACY AND SECURITY. © 2005 The McGraw-Hill Companies, Inc. All Rights Reserved Competencies Describe concerns associated with computer.
Fifth Edition 1 M a n a g e m e n t I n f o r m a t i o n S y s t e m s M a n a g I n g I n f o r m a t i o n T e c h n o l o g y i n t h e E – B u s i.

Fifth Edition 1 M a n a g e m e n t I n f o r m a t i o n S y s t e m s M a n a g I n g I n f o r m a t i o n T e c h n o l o g y i n t h e E – B u s i.
Security and Ethical Challenges

Security and Ethical Challenges
Eleventh Edition 1 Introduction to Information Systems Essentials for the Internetworked E-Business Enterprise Irwin/McGraw-Hill Copyright © 2002, The.

Eleventh Edition 1 Introduction to Information Systems Essentials for the Internetworked E-Business Enterprise Irwin/McGraw-Hill Copyright © 2002, The.
MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 LO1 Describe information technologies that could be used in computer.

MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 LO1 Describe information technologies that could be used in computer.
1 Tonga Institute of Higher Education IT 245 Management Information Systems Lecture 11 Security, and Ethical Challenges of E- Business.

1 Tonga Institute of Higher Education IT 245 Management Information Systems Lecture 11 Security, and Ethical Challenges of E- Business.
McGraw-Hill/Irwin ©2008,The McGraw-Hill Companies, All Rights Reserved Chapter 11 Security and Ethical Challenges.

McGraw-Hill/Irwin ©2008,The McGraw-Hill Companies, All Rights Reserved Chapter 11 Security and Ethical Challenges.
PRELIM TOPICS. IS operations management is concerned with the use of hardware, software, network, and personnel resources in data centers Operational.

PRELIM TOPICS. IS operations management is concerned with the use of hardware, software, network, and personnel resources in data centers Operational.
Technology Ethics, Computer Crime, Cybercrime, Hacking Tactics, Cyber Theft, Internet Abuses in the Workplace, Software Piracy, Theft of Intellectual Property,

Technology Ethics, Computer Crime, Cybercrime, Hacking Tactics, Cyber Theft, Internet Abuses in the Workplace, Software Piracy, Theft of Intellectual Property,
Chapter 11 Security and Privacy: Computers and the Internet.

Chapter 11 Security and Privacy: Computers and the Internet.
Cyber Crimes.

Cyber Crimes.
1 McGraw-Hill/Irwin Copyright © 2004, The McGraw-Hill Companies, Inc. All rights reserved. Chapter 11 Security and Ethical Challenges.

1 McGraw-Hill/Irwin Copyright © 2004, The McGraw-Hill Companies, Inc. All rights reserved. Chapter 11 Security and Ethical Challenges.
1 Ethical Challenges in Management. 2 Ethical Responsibility  The use of IT presents major security challenges, poses serious ethical questions, and.

1 Ethical Challenges in Management. 2 Ethical Responsibility  The use of IT presents major security challenges, poses serious ethical questions, and.

Similar presentations

Ads by Google