Topic 5: The Need To protect data in ICT systems: privacy and password Flashcards
Different types of erosion of privacy
- credit checking agencies(cards, mortgages, loans)
- Records of purchases you’ve made
- phishing (and illegal activity which try to find out bank details)
- surveillance cameras (number plate and face recognition systems)
- spyware
- cookies
Personal information held on ict systems
- earnings
- credit history
- purchase made
- insurance details
- exams and qualifications
- Marketing information (gained from replies to questionnaire)
- phone call details
- medical details
The use of user-IDs or usernames
Facts about user-IDs
- A user ID is unique to a particular person and will normally be an abbreviation of person’s full name
- using the user-ID, the computer can allow users to have their own personal settings and files
- when the user ID is entered the computer will know who is using the computer. It then has to know that it is the actual person using the computer and this is where a password comes in
Problems with passwords
- people to symbolise because they are easy to remember which makes it easy for her hackers to crack their password
- choose pet names, football teams(easily guessed by friends)
- people often have to remember so many password so they write them down>increasing security risks
- not changed regularly enough(^risk of hackers)
Rules for passwords
- don’t use a word that can be found in dictionary
- dont use your own or any other name or surname even if you put numbers after it
- always use maximum number of characters the system allows
- include numbers&letters&upper&lower case letters
- don’t write your password down
- don’t make password the same as your user ID
Spyware
What it is
What it records details of
Uses of spyware
software which collects info without consent about the use of a computer connected to Internet&can scan hard drive for info it has been instructed tofind
- keystrokes used
- web browsing history
- to investigate your searching history on Internet so you can be targeted for an advertising campaign
- taking passwords and credit card details for fraud
What Internet service providers record
- Pages visited on the Internet
- how long was spent on each page
- downloads made
- email addresses of the recipients
- contents of each email
- dates and times each email was sent
What problems does spyware cause
- identity theft/fraud:can search for passwords and credit card details
- Computer crashes: software may have bugs which cause computer to crash
- Poor performance:spyware runs in the background so slows computer down
- pop-ups and banners-targeting you for advertising
- can disable firewall&antivirus software
Ways to remove spyware
- install anti-spyware software
- install a security suite of software or antivirus software
- install software provided by your Internet service provider
What does anti-spyware software do
- and the memory for any spyware running
- scan any new programs that have been downloaded
- Scan any programs that try to reinstall themselves
- Scan the entire hard drive
Cookies
Problems with cookies
Used by websites to collect information about how you use the website
A small text file downloaded to your computer. Websites will try to promote products that users have shown a previous interesting
-erode our privacy by following our paths through certain websites and is done without the users knowledge
Problems with online banking
What are banking problems caused by:
P
People getting unauthorised access to ur account
Phishing: this is where people send emails asking people who are using the on-line banking system to update their account details. When the user clicks on the link it takes them to a fake website which looks similar to the real bank site. User is then asked to type in their personal info e.g password, credit/bank details&fraudster has access to bank
What are banking problems caused by:
T
Trojans: lines of computer code that are stored in your PC without you knowing. They are loaded into your computer when you look at an email or visit a fake website. Aim is to get your username and your password which your code transmits back to the fraudster
Small programs used to get details of userna&pass
Identity theft/fraud
Stealing information about you such as banking/credit cards details and other personal information in order to commit fraud
Keeping bank details private
Used when info is sent over the Internet or another network and needs to be kept secure.
-process of coding data, sending it over the Internet and then decoding when it reaches the true recipient
What encryption should be used for
Problems with encryption
-on-line banking, sending payment details (bank details e.g sort code numbers, account number)
-confidential emails
P:-security forces don’t like people using codes they cannot crack themselves as they can’t read e
-encryption can be used for secret conversations between criminals or terrorists