Security and Ethics

Class: SSS Three Topic: Data Security & Legal Issues

---

Definition of Data Security

Data security is all about keeping our digital information safe. It is the practice of protecting data from being damaged, lost, or accessed by people who are not allowed to see it. Think of it like putting a strong lock on a valuable item to prevent theft or damage.

---

Sources of Security Breaches (Threats)

A security breach happens when data is accessed, copied, stolen, or damaged without permission. Common sources of security breaches include:

1. Malicious Software (Malware): These are harmful programs designed to damage or gain unauthorized access to computer systems.
   • a. Virus: A computer virus is like a biological virus; it attaches itself to other programs or files. It needs a human action (like running an infected program) to spread from one computer to another, leaving infections as it travels.
   • b. Worms: Unlike viruses, worms can spread by themselves from computer to computer without any human help. They often use network features to travel quickly and infect many systems.
   • c. Trojan Horse: A Trojan horse is a deceptive program that looks like a harmless or useful application but hides harmful code. It does not replicate itself, but it can be very destructive. Trojans can also create "backdoors" (hidden ways in) for malicious users to access your system, potentially stealing confidential information.
2. Poor Network Implementation: This refers to weak setup or management of computer networks, such as using easily guessed passwords, not encrypting data, or having open network ports. This makes it easy for unauthorized individuals to gain access.
3. Poor or Lacking ICT Policies: When there are no clear rules or guidelines (ICT policies) for how people should use computers and handle data, or if these rules are not properly enforced, it can lead to security weaknesses.
4. Carelessness / Human Error: Many security breaches happen because of human mistakes, like:
   • Giving out personal and vital information (passwords, bank details) on the internet without careful checking.
   • Falling for phishing scams (tricking people into giving out information).
   • Not logging out of accounts or leaving devices unlocked.
5. Malicious Actors: These are individuals or groups who intentionally try to breach security:
   • Hackers: People who gain unauthorized access to computer systems, often for malicious purposes like stealing data or causing damage.
   • Spammers: People who send large amounts of unsolicited (unwanted) messages, often for advertising or scams.
   • Scammers: People who use deceptive tactics (like fake promises or threats) to trick others into giving them money or personal information.

---

Preventive Measures for Data Security

To protect data and computer systems from breaches, we can take several important steps:

1. Use Antivirus Software: Install and regularly update powerful antivirus software (e.g., Norton, McAfee, Avast, Kaspersky) to detect, prevent, and remove malicious programs.
2. Use a Firewall: A firewall is like a security guard for your computer or network. It's a software utility or hardware device that controls what data is allowed to enter or leave your system, blocking unauthorized access.
3. Exercise Care with Personal Information: Be very cautious about giving out vital and personal information (like your full name, address, phone number, or financial details) online. Always verify who you are sharing it with.
4. Implement Proper Network Policies: Ensure that computer networks are set up securely with strong passwords, regular security updates, and clear rules for users on data access and usage.
5. Be Careful with Email Attachments and Links: Never open email attachments or click on links from unknown senders, as they are common ways for viruses and malware to spread.
6. Use Strong, Unique Passwords: Create complex passwords that combine letters (uppercase and lowercase), numbers, and symbols, and use a different password for each important account.
7. Regular Data Backup: Regularly copy your important files to another location (like an external hard drive or cloud storage) so you don't lose them if your main computer is damaged or infected.

---

Ethics in Computing

Ethics refers to a set of moral principles that guide the behavior of an individual or a group, helping them decide what is right or wrong.

Therefore, computer ethics is a set of moral principles that specifically regulate how people should use computers and the internet responsibly and respectfully, ensuring fairness and safety for everyone.

---

Ethics in Computing

Ethics refers to a set of moral principles that guide the behavior of an individual or a group, helping them decide what is right or wrong.

Therefore, computer ethics is a set of moral principles that specifically regulate how people should use computers and the internet responsibly and respectfully. It guides us to use technology in a way that is fair, safe, and beneficial for everyone, preventing misuse and harm.

Common Ethical Issues in Computing

Here are some important ethical considerations and dilemmas that arise from the use of computers and the internet:

1. Privacy: This involves respecting the personal information of individuals.
   • It is unethical to access someone's private files, messages, or accounts without their permission.
   • Sharing someone's personal data (like photos, addresses, or phone numbers) online without their consent is a serious breach of privacy.
   • Ethical discussions also involve how companies collect and use your data for advertising or other purposes.
2. Intellectual Property and Plagiarism: This is about respecting the creative work of others.
   • It is unethical to copy and paste someone's written work, images, music, or videos from the internet and present them as your own without giving credit (this is called plagiarism).
   • While software piracy (illegal copying of software) is a legal issue, it is also unethical because it deprives creators of their rightful earnings.
3. Accuracy and Reliability: This relates to the trustworthiness of information and computer systems.
   • It is unethical to intentionally spread false information (misinformation or disinformation) online.
   • Programmers and data handlers have an ethical responsibility to ensure that the data they process and the software they create produce accurate and reliable results.
4. Accessibility and the Digital Divide: This involves ensuring fair access to technology.
   • An ethical concern is the "digital divide," where some people have easy access to computers and the internet while others do not.
   • Efforts to make technology accessible to people with disabilities (e.g., screen readers for the visually impaired) are driven by ethical considerations.
5. Digital Footprint and Online Reputation: Everything you do online leaves a "digital footprint" – a record of your activities.
   • Ethically, you should be mindful of what you post online, as it can be permanent and affect your reputation (and that of others) in the future.
   • It is unethical to post hurtful, embarrassing, or inappropriate content about yourself or others.
6. Cyberbullying and Netiquette: This focuses on respectful online behavior.
   • It is unethical to use computers or the internet to harass, threaten, or insult others (cyberbullying).
   • Practicing good netiquette (internet etiquette) means being polite, respectful, and thoughtful in all your online communications.
7. Responsible Use of Resources:
   • Using school or public computer resources for unauthorized activities (like playing excessive games during class time, or downloading huge non-academic files) is unethical as it wastes resources and can slow down the network for others.

---

Legal Issues

Legal issues in computing refer to the laws and rules related to the use and misuse of Information and Communication Technology (ICT) and its various applications. Breaking these laws can lead to serious penalties.

Some common legal issues include:

1. Intellectual Property (IP) Rights: Intellectual property refers to creations of the mind, such as inventions, literary and artistic works, designs, symbols, names, and images used in commerce.
   • These rights give creators exclusive legal control over their creations for a certain period, preventing others from using them without permission.
   • Examples of IP rights include copyrights (for books, music, software), patents (for inventions), and trademarks (for brands and logos).
2. Piracy: This is the illegal copying, distribution, or use of software, movies, music, or other digital content without the permission of the copyright owner. It is a serious crime that harms creators and businesses.
3. Cybercrime: This is a broad term for any criminal activity that involves a computer or network. It includes activities like hacking, online fraud, identity theft, cyberbullying, and distributing malware.
4. Data Protection and Privacy Laws: These laws protect individuals' personal information (like names, addresses, health records) stored on computers and online. They ensure that organizations handle personal data responsibly, securely, and only with permission.
5. Online Defamation: This happens when someone publishes false statements about another person online (e.g., on social media or forums) that harm their reputation. This can lead to legal action.