1. Module 13: Ethics and Security in computing Some social issues in computing Division issues, workplace issues, legal issues Division issues, workplace issues, legal issues protecting children on the Internet protecting children on the Internet Ethics in computing Significance of the ethics Significance of the ethics intellectual property rights intellectual property rights Security issues in computing Security problems Security problems Protection Protection Viruses and worms Viruses and worms

2. 2 Division issue: Haves vs. Have-Nots Division caused by computing access Those with access to computers and the Internet take advantage of personal and economic opportunities Those with access to computers and the Internet take advantage of personal and economic opportunities Those without access fall farther behind Those without access fall farther behind Major divisions within countries Between urban areas and rural ones Between urban areas and rural ones Between rich and poor Between rich and poor Major divisions among nations Between industrialized and non-industrialized nations Between industrialized and non-industrialized nations Narrowing the Divide

3. 3 Workplace Issues Healthy computing Harmful emissions from monitor, Eyestrain from monitor, Back pain from position of chair and desk, Repetitive strain injury Harmful emissions from monitor, Eyestrain from monitor, Back pain from position of chair and desk, Repetitive strain injury Ergonomic equipment, Ergonomic behavior Ergonomic equipment, Ergonomic behavior Ergonomics refers to human factors related to the use of computers Ergonomics refers to human factors related to the use of computers Employee monitoring An employer monitors an employee’s performance An employer monitors an employee’s performance Many companies have policies that notify employees about monitoring practices Many companies have policies that notify employees about monitoring practices Environmental concerns Power consumption. Computer supplies. PC disposal Power consumption. Computer supplies. PC disposal

4. 4 Many other issues Jurisdictional issues International issues International issues Applying national laws to a world-wide medium is a difficult process Issues exist over which country’s court has jurisdiction National issues National issues Issues exist over which locality’s court has jurisdiction Imposition of sales taxes on Internet transactions Protecting Children on the Internet The Internet offers many opportunities for children The Internet offers many opportunities for children There are also unsavory elements on the Internet There are also unsavory elements on the Internet Ways to protect children Ways to protect children Blocking software. Child monitoring. Laws to protect children

5. 5 Ethics in Computing Ethics – standards of moral conduct Used to help determine the proper course of action in difficult situations Used to help determine the proper course of action in difficult situations Ethics Issues Computer ethics Computer ethics Professional ethics Professional ethics Programmer responsibility Programmer responsibility Ethical use of computers Ethical use of computers

6. 6 Computer Ethics Ten Commandments of Computer Ethics Apply general ethical principles to computing Developed by the Computer Ethics Institute

7. 7 Professional Ethics Relates to ethics of those whose work focuses on computer systems Code of Ethics and Professional Conduct developed by the Association for Computing Machinery (ACM) Divided into sections General principles General principles Professional responsibilities Professional responsibilities Guidelines for organizational systems Guidelines for organizational systems

8. 8 Programmer Responsibility Bug-free software does not exist Testing can only show the presence of bugs, not their absence Testing can only show the presence of bugs, not their absence Issues related to software quality How much testing is enough? How much testing is enough? How many minor bugs are acceptable in software about to be released? How many minor bugs are acceptable in software about to be released?

9. 9 Ethical Use of Computers Data quality Users are responsible for the quality of data entered into the system Users are responsible for the quality of data entered into the system Procedures must be in place to detect and correct inaccurate information Procedures must be in place to detect and correct inaccurate information Protecting customers’ personal data Particularly relevant to companies doing business over the Internet Particularly relevant to companies doing business over the Internet Develop privacy policies stating how data will be used Develop privacy policies stating how data will be used Two approaches Two approaches Opt-in policy – customers are notified of privacy policy and must agree before their data can be released Opt-out policy – customers are assumed to agree to the release of their data unless they specifically request it be kept private Digitally altering data

10. 10 Intellectual Property Rights Refers to results of intellectual activity in the industrial, scientific, literary, or artistic fields U.S. Copyright Act provides protection in three areas Copyrights Copyrights Patents Patents Trademarks Trademarks

11. 11 Copyrights Provides the creator of a literary or artistic work with control over its use and distribution Widespread distribution of music and video over the Internet has created quite a controversy Widespread distribution of music and video over the Internet has created quite a controversy Defining fair use has been difficult Under fair use, you may use copyrighted works for limited purposes Under fair use, you may use copyrighted works for limited purposes

12. 12 Digital Fair Use Issues Copy-protection schemes make it impossible to copy CDs and DVDs Users claim that violates their fair use rights Users claim that violates their fair use rightsSoftware Users may not modify copyrighted software Users may not modify copyrighted software Digital images Images on the Web may be downloaded and used as screen savers, but they may not be distributed or altered Images on the Web may be downloaded and used as screen savers, but they may not be distributed or alteredPlagiarism Work taken from the Internet must be cited if it is used in a paper or other presentation Work taken from the Internet must be cited if it is used in a paper or other presentation

13. 13 Trademarks A word, name, symbol, or device used to distinguish one company and its products from another Two issues in the digital arena Unauthorized use of one company’s trademarks on another’s Web site Unauthorized use of one company’s trademarks on another’s Web site Obtaining a domain name that includes another company’s trademark, then selling that domain name at a profit Obtaining a domain name that includes another company’s trademark, then selling that domain name at a profit

14. 14 Patents Designed to protect inventions and encourage inventors Grant patent holder exclusive rights to the invention Grant patent holder exclusive rights to the invention Patent Office will grant patent protection to software algorithms and techniques Will also grant patents for business methods implemented in software Will also grant patents for business methods implemented in software

15. 15 Security and Privacy Security – data stored on computer must be kept safe Privacy – private data must be kept from prying eyes

16. 16 Computer Crime Hacker – someone who attempts to gain access to computer systems illegally Cracker – someone who uses the computer to engage in illegal activity Most commonly reported categories Credit card fraud Credit card fraud Data communications fraud Data communications fraud Unauthorized access to computer files Unauthorized access to computer files Unlawful copying of copyrighted software Unlawful copying of copyrighted software

17. 17 Methods Computer Criminals Use Bomb Denial of service PiggybackingTrapdoor Trojan horse

18. 18 Bomb Causes a program to trigger damage under certain conditions Usually set to go off at a later date Usually set to go off at a later date Sometimes planted in commercial software Shareware is more prone to having a bomb planted in it Shareware is more prone to having a bomb planted in it

19. 19 Denial of Service Attack Hackers bombard a site with more requests than it can possibly handle Prevents legitimate users from accessing the site Prevents legitimate users from accessing the site Hackers can cause attacks to come from many different sites simultaneously Hackers can cause attacks to come from many different sites simultaneously

20. 20 Piggybacking An illicit user “rides” into the system on the back of an authorized user If the user does not exit the system properly, the intruder can continue where the original user has left off If the user does not exit the system properly, the intruder can continue where the original user has left off Always log out of any system you log into

21. 21 Trapdoor An illicit program left within a completed legitimate program Allows subsequent unauthorized and unknown entry by the perpetrator to make changes to the program Allows subsequent unauthorized and unknown entry by the perpetrator to make changes to the program

22. 22 Trojan Horse Involves illegal instructions placed in the middle of a legitimate program Program does something useful, but the Trojan horse instructions do something destructive in the background Program does something useful, but the Trojan horse instructions do something destructive in the background

23. 23 White-Hat Hackers Hackers that are paid by a company to break into that company’s computer systems Expose security holes and flaws before criminals find them Expose security holes and flaws before criminals find them Once exposed, flaws can be fixed Once exposed, flaws can be fixed

24. 24 Discovery and Prosecution Crimes are often undetected When they are detected, they are often not reported When they are detected, they are often not reported Prosecution is difficult Law enforcement agencies and prosecutors are ill- equipped to handle computer crime Law enforcement agencies and prosecutors are ill- equipped to handle computer crime Judges and juries often don’t understand computer crime Judges and juries often don’t understand computer crime Congress passed the Computer Fraud and Abuse Act to increase awareness of computer crime

25. 25 Security: Playing It Safe Security – a system of safeguards Protects system and data from deliberate or accidental damage Protects system and data from deliberate or accidental damage Protects system and data from unauthorized access Protects system and data from unauthorized access

26. 26 Controlling Access Four means of controlling who has access to the computer What you have What you have What you know What you know What you do What you do What you are What you are

27. 27 A Disaster Recovery Plan A method of restoring computer processing operations and data files in the event of major destruction Several approaches Manual services Manual services Buying time at a service bureau Buying time at a service bureau Consortium Consortium Plan should include priorities for restoring programs, plans for notifying employees, and procedures for handling data in a different environment

28. 28 Data Security Several techniques can be taken to prevent theft or alteration of data Internal controls Internal controls Auditor checks Auditor checks Applicant screening Applicant screening Passwords Passwords Built-in software protection Built-in software protection

29. 29 Personal Computer Security Physical security of hardware Secure hardware in place with locks and cables Secure hardware in place with locks and cables Avoid eating, drinking, and smoking around computers Avoid eating, drinking, and smoking around computers

30. 30 Backing Up Files Back up to tape drive, CD-RW, or DVD-RAM You can use software that automatically backs up at a certain type of day You can use software that automatically backs up at a certain type of day Disk mirroring Makes second copy of everything you put on disk to another hard disk Makes second copy of everything you put on disk to another hard disk Three types of backup Full backup – copies everything from the hard drive Full backup – copies everything from the hard drive Differential backup – copies all files that have been changed since the last full backup Differential backup – copies all files that have been changed since the last full backup Incremental backup – copies only those files that have been changed since either the last full backup or the last incremental backup Incremental backup – copies only those files that have been changed since either the last full backup or the last incremental backup Comprehensive backup plan

31. 31 Worm A program that transfers itself from computer to computer Plants itself as a separate file on the target computer’s disks Plants itself as a separate file on the target computer’s disks

32. 32 Virus A set of illicit instructions that passes itself on to other files, which can tremendous damage to computer and data files Transmission of virus Viral instructions inserted into a game or file Viral instructions inserted into a game or file Typically distributed via the Web or e-mail Users download the file onto their computers Users download the file onto their computers Every time the user opens that file, virus is loaded into memory Every time the user opens that file, virus is loaded into memory As other files are loaded into memory, they become infected

33. 33 Virus Prevention Antivirus software Detects virus signature Detects virus signature Scans hard disk every time you boot the computer Scans hard disk every time you boot the computer Viruses tend to show up on free software or software downloaded from the Internet Use antivirus software to scan files before you load them on your computer Use antivirus software to scan files before you load them on your computer Often distributed as e-mail attachments Do not open e-mail attachments without scanning them or if you do not know the person sending the e- mail Do not open e-mail attachments without scanning them or if you do not know the person sending the e- mail

34. 34 Security Problems on the Internet With so many people on the Internet, how do you keep data secure? Several approaches Using a firewall Using a firewall Encryption Encryption

35. 35 A Firewall A combination of hardware and software that sits between an organization’s network and the Internet All traffic between the two goes through the firewall All traffic between the two goes through the firewall Protects the organization from unauthorized access Protects the organization from unauthorized access Can prevent internal users from accessing inappropriate Internet sites Can prevent internal users from accessing inappropriate Internet sites

36. 36 Encryption Scrambling data so that it can only be read by a computer with the appropriate key Encryption key converts the message into an unreadable form Encryption key converts the message into an unreadable form Message can be decrypted only by someone with the proper key Message can be decrypted only by someone with the proper key Private key encryption – senders and receivers share the same key Public key encryption – encryption software generates the key

37. 37 Cookies A small text file stored on your hard drive File is sent back to the server each time you visit that site Stores preferences, allowing Web site to be customized Stores preferences, allowing Web site to be customized Stores passwords, allowing you to visit multiple pages within the site without logging in to each one Stores passwords, allowing you to visit multiple pages within the site without logging in to each one Tracks surfing habits, targeting you for specific types of advertisements Tracks surfing habits, targeting you for specific types of advertisements

38. 38 Spamming Mass advertising via e-mail Can overflow your e-mail inbox Can overflow your e-mail inbox Bogs down your e-mail server, increasing the cost of e-mail service Bogs down your e-mail server, increasing the cost of e-mail service Preventing spam Many ways you can minimize junk e-mail Many ways you can minimize junk e-mail Be careful how you give out your e-mail address Filtering software allows you to block messages or send them to designated folders Don’t register at Web sites without a promise the Web site will not sell your information NEVER respond to spam Anti-spamming legislation