Security, Privacy, and Ethical Issues
in Information Systems and the
Internet
Chapter 14
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
1
Principles and Learning Objectives
• Policies and procedures must be established
to avoid computer waste and mistakes.
– Describe some examples of waste and mistakes
in an IS environment, their causes, and possible
solutions.
– Identify policies and procedures useful in
eliminating waste and mistakes.
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
2
Principles and Learning Objectives
• Computer crime is a serious and rapidly growing
area of concern requiring management
attention.
– Explain the types and effects of computer crime.
– Identify specific measures to prevent computer crime.
– Discuss the principles and limits of an individual’s
right to privacy.
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
3
Principles and Learning Objectives
• Jobs, equipment, and working conditions must
be designed to avoid negative health effects.
– List the important effects of computers on the work
environment.
– Identify specific actions that must be taken to ensure
the health and safety of employees.
– Outline criteria for the ethical use of information
systems.
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
4
Social Issues in Information Systems
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
5
Computer Waste & Mistakes
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
6
Computer Waste
• Discard technology
• Unused systems
• Personal use of corporate time and technology
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
7
Preventing Computer Waste and
Mistakes
•
•
•
•
Establish Policies and Procedures
Implement Policies and Procedures
Monitor Policies and Procedures
Review Policies and Procedures
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
8
Preventing Computer-Related Waste
and Mistakes
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
9
Implementing Policies and Procedures
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
10
Computer Crime
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
11
Number of Incidents Reported to CERT
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
12
Computer Crime and Security Survey
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
13
The Computer as a Tool to
Commit Crime
•
•
•
•
Social engineering
Dumpster diving
Identity theft
Cyberterrorism
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
14
Computers as Objects of Crime
• Illegal access and use
– Hackers vs. crackers
– Script bunnies
– Insiders
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
15
Illegal Access and Use
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
16
Data Alteration and Destruction
• Virus
– Application virus
– System virus
– Macro virus
• Worm
• Logic bomb
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
17
Data Alteration and Destruction
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
18
Top Viruses – July 2002
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
19
Top Viruses – July 2002
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
20
Computers as Objects of Crime
•
•
•
•
Information and equipment theft
Software and Internet piracy
Computer-related scams
International computer crime
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
21
Preventing Computer-Related Crime
• Crime prevention by state and federal agencies
• Crime prevention by corporations
– Public Key Infrastructure (PKI)
– Biometrics
• Antivirus programs
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
22
Preventing Computer-Related Crime
• Intrusion Detection Software
• Managed Security Service Providers (MSSPs)
• Internet Laws for Libel and Protection of
Decency
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
23
Preventing Crime on the Internet
• Develop effective Internet and security policies
• Use a stand-alone firewall with network monitoring
capabilities
• Monitor managers and employees
• Use Internet security specialists to perform audits
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
24
Common Methods Used to Commit
Computer Crimes
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
25
How to Protect Your Corporate Data
from Hackers
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
26
Privacy
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
27
Privacy Issues
•
•
•
•
Privacy and the Federal Government
Privacy at work
E-mail privacy
Privacy and the Internet
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
28
Using Antivirus Programs
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
29
Fairness and Information Use
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
30
Federal Privacy Laws
and Regulations
• The Privacy Act of 1979
• Gramm-Leach-Bliley Act
• USA Patriot Act
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
31
Other Federal Privacy Laws
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
32
Other Federal Privacy Laws
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
33
The Work Environment
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
34
Health Concerns
• Repetitive stress injury (RSI)
• Carpal tunnel syndrome (CTS)
• Ergonomics
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
35
Avoiding Health and Environment
Problems
•
•
•
•
Maintain good posture and positioning.
Don’t ignore pain or discomfort.
Use stretching and strengthening exercises.
Find a good physician who is familiar with RSI and how
to treat it.
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
36
Medical Topics on the Internet
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
37
Ethical Issues in Information Systems
• The AITP Code of Ethics
– Obligation to management
– Obligation to fellow AITP members
– Obligation to society
• The ACM Code of Professional Conduct
– Acquire and maintain professional competence
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
38
AITP Code of Ethics
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
39
Summary
• Computer waste - the inappropriate use of computer
technology and resources in both the public and private
sectors
• Software and Internet piracy - represent the most
common computer crime
• Ethics - determine generally accepted and discouraged
activities within a company
MSIS 110: Introduction to Computers; Instructor: S. Mathiyalakan
40