We think you have liked this presentation. If you wish to download it, please recommend it to your friends in any social system. Share buttons are a little bit lower. Thank you!
Presentation is loading. Please wait.
Modified over 6 years ago
8.1 © 2007 by Prentice Hall 8 Chapter Securing Information Systems
8.2 © 2007 by Prentice Hall LEARNING OBJECTIVES Management Information Systems Chapter 8 Securing Information Systems Analyze why information systems need special protection from destruction, error, and abuse. Assess the business value of security and control. Design an organizational framework for security and control. Evaluate the most important tools and technologies for safeguarding information resources.
8.3 © 2007 by Prentice Hall Phishing: A Costly New Sport for Internet Users Problem: Large number of vulnerable users of online financial services, ease of creating bogus Web sites. Solutions: Deploy anti-phishing software and services and a multilevel authentication system to identify threats and reduce phishing attempts. Deploying new tools, technologies, and security procedures, along with educating consumers, increases reliability and customer confidence. Demonstrates IT’s role in combating cyber crime. Illustrates digital technology as part of a multilevel solution as well as its limitations in overcoming discouraged consumers. Management Information Systems Chapter 8 Securing Information Systems
8.4 © 2007 by Prentice Hall Systems Vulnerability and Abuse Why systems are vulnerable Internet vulnerabilities Wireless security challenges Malicious software: Viruses, worms, Trojan horses, and spyware Hackers and cybervandalism Spoofing and sniffing Denial-of-service attacks Management Information Systems Chapter 8 Securing Information Systems
8.5 © 2007 by Prentice Hall Contemporary Security Challenges and Vulnerabilities Figure 8-1 The architecture of a Web-based application typically includes a Web client, a server, and corporate information systems linked to databases. Each of these components presents security challenges and vulnerabilities. Floods, fires, power failures, and other electrical problems can cause disruptions at any point in the network. Systems Vulnerability and Abuse Management Information Systems Chapter 8 Securing Information Systems
8.6 © 2007 by Prentice Hall Worldwide Damage from Digital Attacks Figure 8-3 This chart shows estimates of the average annual worldwide damage from hacking, malware, and spam since 1999. These data are based on figures from mi2G and the authors. Systems Vulnerability and Abuse Management Information Systems Chapter 8 Securing Information Systems
8.7 © 2007 by Prentice Hall Systems Vulnerability and Abuse Computer crime and cyberterrorism Identity theft Phishing Evil twins Pharming Click fraud Cyberterrorism and cyberwarfare Internal threats: Employees Software vulnerability Management Information Systems Chapter 8 Securing Information Systems
8.8 © 2007 by Prentice Hall Business Value of Security and Control Legal and regulatory requirements for electronic records management ERM HIPAA Gramm-Leach-Bliley Sarbanes-Oxley Electronic evidence and computer forensics Management Information Systems Chapter 8 Securing Information Systems
8.9 © 2007 by Prentice Hall Establishing a Framework for Security and Control Risk Assessment Security policy Ensuring business continuity Disaster recovery planning and business continuity planning Security outsourcing The role of auditing Management Information Systems Chapter 8 Securing Information Systems
8.10 © 2007 by Prentice Hall Access control Firewalls, intrusion detection systems, and antivirus software Securing wireless networks Encryption and public key infrastructure Technologies and Tools for Security Management Information Systems Chapter 8 Securing Information Systems
8.11 © 2007 by Prentice Hall A Corporate Firewall Figure 8-6 The firewall is placed between the firm’s private network and the public Internet or another distrusted network to protect against unauthorized traffic. Technologies and Tools for Security Management Information Systems Chapter 8 Securing Information Systems
8.12 © 2007 by Prentice Hall Public Key Encryption Figure 8-7 A public key encryption system can be viewed as a series of public and private keys that lock data when they are transmitted and unlock the data when they are received. The sender locates the recipient’s public key in a directory and uses it to encrypt a message. The message is sent in encrypted form over the Internet or a private network. When the encrypted message arrives, the recipient uses his or her private key to decrypt the data and read the message. Technologies and Tools for Security Management Information Systems Chapter 8 Securing Information Systems
Securing Information Systems
Lecture 14 Securing Information Systems
Security and Trust in E- Commerce. The E-commerce Security Environment: The Scope of the Problem Overall size of cybercrime unclear; amount of losses.
1 MIS 2000 Class 22 System Security Update: Winter 2015.
7.1 Copyright © 2011 Pearson Education, Inc. 7 Chapter Securing Information Systems.
7.1 © 2007 by Prentice Hall 7 Chapter Securing Information Systems.
Security+ Guide to Network Security Fundamentals
7.1 Copyright © 2011 Pearson Education, Inc. publishing as Prentice Hall 7 Chapter Securing Information Systems.
Lecture 10 Security and Control.
10.1 © 2006 by Prentice Hall 10 Chapter Security and Control.
8.1 © 2007 by Prentice Hall 8 Chapter Securing Information Systems.
Security Overview. 2 Objectives Understand network security Understand security threat trends and their ramifications Understand the goals of network.
Network Infrastructure Security. LAN Security Local area networks facilitate the storage and retrieval of programs and data used by a group of people.
CYBER CRIME AND SECURITY TRENDS
11.1 Copyright © 2005 Pearson Education Canada Inc. Management Information Systems, Second Canadian Edition Chapter 11: Information Systems Security, Quality,
Lecture 11 Electronic Business (MGT-485). Recap – Lecture 10 Transaction costs Network Externalities Switching costs Critical mass of customers Pricing.
1 Chapter 8 Securing Information Systems. Outline Security Threats (External: malware, spoofing/phishing, sniffing, & data theft: Internal: unauthorized.
© 2021 SlidePlayer.com Inc. All rights reserved.