ISDS FINAL pt1

Individual’s ability to restrict or eliminate the collection, use, and sale of confidential personal information

• Means to communicate without disclosing one’s identity
• More difficult with the use of computers and the Internet

• Cookies
• Global unique identifiers
• Ubiquitous computing
• Radio frequency identification

• Small files written to your hard disk by Web sites visited
• Examples include:
• Track your browsing habits
• Gather personal information without your consent

Identification number produced by software or a piece of hardware

Interacting with multiple networked devices

transmits infrared signals to create an electronic trail

• Uses radio waves to track a chip or tag
• Used for inventory control in stores
• May compromise anonymity and privacy if information stored on tags attached to U.S. passports

• Legislation currently in place includes:
• Fair Credit Reporting Act
• Health Insurance Portability and Privacy Act
• Family Education Rights and Privacy Act
• No comprehensive federal law governing the overall privacy rights of U.S. citizens

Unsolicited messages sent in bulk over electronic mailing systems

• Use products such as Anonymous Surfing or IronKey Secure USB flash.
• Use free Web-based throwaway e-mail addresses in chat rooms and for mailing lists.
• Tell children not give out personal information.
• Complete forms only if you see a privacy statement.
• Turn off cookies

Transparent graphic images placed on a Web site or in ane- ail—used to monitor Web or e-mail behavior

• Create logins and passwords for each person using the computer.
• Do not save account numbers or passwords.
• Close a secured account site when not using a computer.
• Use strong passwords

• Refrain from making personal calls on a work phone
• Avoid using company e-mail for personal purposes
• Assume you are monitored
• Be aware of shoulder surfing
• Do not allow others to tailgate

• Crimes perpetrated through the Internet
• Many Web sites educate users about cybercrime and cybercriminals

Area of law dedicated to computer crime

Identify theft, Dumpster diving, Phishing attacks, Spear phishing, Malware

criminal access to personal information in order to impersonate someone

disgruntled employees or thieves go through a company’s trash to find information they can steal

legitimate-looking e-mails or Web sites created in an attempt to obtain confidential data about a person

(similar to phishing)—uses targeted fake e-mails and social engineering to trick recipients into providing personal information to enable identity theft

(short for malicious software)—programs that intentionally harm a computer system or allow individuals to gain access without permission

• Know who you are dealing with
• Keep your Web browser and operating system up to date
• Back up important files
• Protect children online
• Use security software tools and keep them up to date
• Use strong passwords
• Learn what to do if something goes wrong

• software that gathers private information and tracks web use,
• Adware is one form of this it generates annoying pop-up and banner ads
• Kyloggers is another type and it records keystrokes to provide cyber criminals with confidential data

code concealed inside a program that can harm or destroy files. Many spread to e-mail attachments,

refers to the dangerious actions a virus performs

attach to data files and take advanrage of application macros

execute each time you start the computer

spam text message sent via a cell phone or instant messaging service

hidden computer code tha tsits dormant on a system until triggered

virus program that remains dormant on a computer system until activated

similar to a virus but does not need action of a user to execute

assaults an internet server with so many request it can't function

attack involves multiple comoputer systems

robot network

connects individual computers to the controller usually a server under the control of the botnet controller

form of denial of service attack in which synchronization packets are repeatedly sent to every port on the server

malicious program that is disguised as a useful program, it enables attacker to gain adminstrator level access allows attacker to have repeated and undetected access

normal looking program that includes concealed instructions to cause harm

computer hobbyists attempting unauthorized access, generally subscribing to an unwritten code of conduct - Hacker ethic

groups of hackers working together to coordinate attacks

sends a message with an IP address disguised as a message from a trusted source

computer baited with fake data and purposely left vulnerable to study how intruders operate to prapre stronger defenses

attemptto enter higly secure computer systems to destroy data or steal information

use expertise to shore up computer system defenses

• Use the Internet, social networking sites, and e-mail to harass or threaten
• Most perpetrators are men
• Most victims are college-age women

• Sending threatening messages via e-mail or text message
• Usually involves minors

• Any intentional or unintentional action resulting in damaging a computer system or its data
• Increased by wireless LANs because transmissions occur over shared airwaves instead of dedicated lines

tricking travelers into using phony WiFi hot spots—evil twins

unauthorized access of corporate information usually to the benefit of a competitor

using removiable storage media to create unauthorized copies of confidential data

security holes created by employees allowing entry to company systems after leaving the firm

use of information technologies to corrupt or destroy an enemy's information and industrial infrasture

provides additional power during outages or electrical current fluctuations

use of voice recognition, retinal scans, and fingerprint scans for authentication

hardware or software, to prevent unauthorized access

Study of transforming information into an encoded or scrambled format

Coding or scrambling process that renders a message unreadable by anyone other than the intended recipient

Readable message that has not been encrypted

Formula that makes a plaintext message unreadable

Coded message

Uses same key for both encryption and decryption

Occurs when a symmetric key encryption is stolen, allowing others to decrypt messages encrypted with that encryption key

• Uses digital certificates
• Enable parties engaged in Internet-mediated transactions to confirm each other’s identities

• Uniform set of encryption standards
• No dominant standard
• Public fear of a monopoly if a PKI is chosen

U.S. government continues search for ways to balance the public’s right to privacy and the government’s need to know

Obligation of parties to a lawsuit to exchange documents existing only in electronic form

Legal evidence found in computers and digital storage media