This document discusses management information systems security and control. It covers various security concepts including unauthorized access, modification, and deletion of information. It identifies unintentional threats like human error and intentional threats like criminal attacks. The goals of information security are prevention, detection, and response. Risks to information systems include computer crime, hacking, cyber-theft, and software piracy. Major defense strategies discussed are firewalls, email monitoring, antivirus software, encryption, authentication, backup files, and security monitors.
This document discusses management information systems security and control. It covers various security concepts including unauthorized access, modification, and deletion of information. It identifies unintentional threats like human error and intentional threats like criminal attacks. The goals of information security are prevention, detection, and response. Risks to information systems include computer crime, hacking, cyber-theft, and software piracy. Major defense strategies discussed are firewalls, email monitoring, antivirus software, encryption, authentication, backup files, and security monitors.
This document discusses management information systems security and control. It covers various security concepts including unauthorized access, modification, and deletion of information. It identifies unintentional threats like human error and intentional threats like criminal attacks. The goals of information security are prevention, detection, and response. Risks to information systems include computer crime, hacking, cyber-theft, and software piracy. Major defense strategies discussed are firewalls, email monitoring, antivirus software, encryption, authentication, backup files, and security monitors.
This document discusses management information systems security and control. It covers various security concepts including unauthorized access, modification, and deletion of information. It identifies unintentional threats like human error and intentional threats like criminal attacks. The goals of information security are prevention, detection, and response. Risks to information systems include computer crime, hacking, cyber-theft, and software piracy. Major defense strategies discussed are firewalls, email monitoring, antivirus software, encryption, authentication, backup files, and security monitors.
Download as PPTX, PDF, TXT or read online from Scribd
Download as pptx, pdf, or txt
You are on page 1/ 11
MANAGEMENT INFORMATION
SYSTEMS SECURITY AND
CONTROL
Submitted By: Brijesh Patel Roll No 19
Security?
Security concepts covers a wide array of activities, includes
products and processes to prevent unauthorized access, modification and deletion of information knowledge, data and facts
Information Systems Concerns:
1. Unintentional threats Human error in design or use of system Environmental hazards acts of God and other Computer system failures faulty products 2. Intentional threats Systems are subject to a wide variety of hazards from criminal attacks
GOALS OF INFORMATION SECURITY
1)Prevention Prevent computer or information violations from occurring. - Simple incidents are losing a password, or leaving a terminal logged on overnight 2) Detection Detection includes identifying the assets under attack, how it occurred and by whom. 3) Response Refers to developing strategies and techniques to deal with an attack or loss.
RISK TO IS :
1. Risk to Application and Data)
Computer crime
The unauthorized use, access, modification, and destruction of
hardware, software, data, or network resources. The unauthorized release of information The unauthorized copying of software Denying an end user access to his or her own hardware, software, data, or network resources)
Hacking
Hacking is the obsessive use of computers, or the unauthorized access
and use of networked computer systems. Illegal hackers (also called crackers) frequently assault the Internet and other networks to steal or damage data and programs. Hackers can monitor e-mail, web server access, or file transfers to extract passwords or steal network files, or to plant data that will cause a system to welcome intruders. Use remote services that allow one computer on a network to execute programs on another computer to gain privileged access within a network.
Continue
Cyber-Theft- Many computer crimes involve the theft of
money.- Involve unauthorized network entry and fraudulent alternation of computer databases to cover the tracks of the employees involved.
Unauthorized Use at Work- This may range from doing
private consulting or personal finances, or playing video games to unauthorized use of the Internet on company networks.
Software Piracy- Unauthorized copying of software or
software piracy is a major form of software theft because software is intellectual property, which is protected by copyright law and user licensing agreements.
Risk to hardware
Natural Disaster
Disasters that pose a risk to IS include fires, floods,
hurricanes, which can destroy hardware, software and can causing total partial paralysis of systems communications lines. Brownout the voltage of power decreases @ short interruptions in the flow of power. Vandalism - occur when human beings deliberately destroy computer systems.
Major Types of Defense Strategies
Firewalls
Firewall computers and software is another important method for
control and security on the Internet and other networks. A network firewall can be a communications processor, typically a router, or a dedicated server, along with firewall software.
E-Mail Monitoring
Internet and other online e-mail systems are one of the favorite avenues of attack by hackers for spreading computer viruses or breaking into networked computers.
Virus Defenses (Antivirus Software)
Antivirus software scans the computers memory, disks and all
email. It uses a virus definition file that is updated regularly
Major Types of Defense Strategies
1. Encryption Encryption characteristics include: Passwords, messages, files, and other data can be transmitted in scrambled form and unscrambled by computer systems for authorized users only. Encryption involves using special mathematical algorithms, or keys, to transform digital data into a scrambled code before they are transmitted, and to decode the data when they are received.
continue
2. Authentication
Authentication is a critical part of a security system. It is
part of the process referred to as Identification and authentication (I&A). Identification process starts when a user ID or Logon name is typed into a sign on screen. Authentication methods are based on one or more of three factors.
1) password or PIN.
2) smart card or an identification device.
3) fingerprints or retinal pattern.
3)Backup Files Backup files, which are duplicate files of data or programs, are another important security measure.
Files can be protected by file retention measures that
involve storing copies of files from previous periods.
Security Monitors System security monitors are
programs that monitor the use of computer systems and networks and protect them from unauthorized use, fraud, and destruction.
