CSC408 MANAGEMENT INFORMATION SYSTEM by nur liana https://padlet.com/nliana246/kz89l7sz5qt2 NURLIANA BINTI MOHD HISHAM AM2284C en-us 2018-12-29 12:08:11 UTC 2018-12-29 13:39:40 UTC hello@padlet.com 1. Briefly explain the following computer crimes. nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833066 a.Sniffer – it is eavesdropping program that monitors information traveling over networks. It also enables hackers to steal proprietary information like email, company files and others. 

b.Phishing – it is setting up fake Web sites or sending email messages that look like legitimate business to ask users for confidential personal data. 

c.Pharming – it redirects users to a bogus Web page, even when individual types correct Web page address into his or her browser.

d.Spoofing – it misrepresenting oneself by using fake email addresses or masquerading as someone else. It also redirecting Web link to address different from  intended one, with site masquerading as intended destination.
]]> 2018-12-29 12:15:50 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833066 2. a) Distinguish the TWO (2) methods for encrypting network traffic on the Web. nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833117 - TLS is a cryptographic protocol that provides end-to-end communications security over networks and is widely used for internet communications and online transactions. It is an IETF standard intended to prevent eavesdropping, tampering and message forgery. Common applications that employ TLS include Web browsers, instant messaging, e-mail and voice over IP.
- SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers.
]]> 2018-12-29 12:18:08 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833117 2.b)  Briefly explain the following terms. nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833198 i. Cyber warfare - Cyber warfare includes the activities by a country state or global association to assault and endeavor to harm another country's PCs or data organizes through, for instance, PC infections or refusal of-benefit assaults. RAND research provides recommendations to military and regular citizen chiefs on strategies for shielding against the harming impacts of digital fighting on a country's advanced framework.
 ii. Computer Forensic - Computer forensics is the practice of collecting, analyzing and reporting on digital data in a way that is legally admissible. It can be used in the detection and prevention of crime and in any dispute where evidence is stored digitally. Computer forensics follows a similar process to other forensic disciplines, and faces similar issues.]]> 2018-12-29 12:21:47 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833198 3.a) Without protection against malware and intruders, connecting to the Internet could be very dangerous. Firewalls, intrusion detection system and antivirus software have become the tools to overcome this problem. Briefly explain these THREE (3) tools. nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833248 1.Firewalls
Combination of hardware and software that prevents unauthorized users from accessing private networks whereby it consists of Static packet filtering, Stateful inspection, Network address translation (NAT), and Application proxy filtering.

2.Intrusion Detection System
Monitoring hot spots on corporate networks to detect and deter intruders and examines events as they are happening to discover attacks in progress.
 
3.Antivirus Software
Checks computers for presence of malware and can often eliminate it as well whereby it requires continual updating.
]]> 2018-12-29 12:23:32 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833248 3. b) Information systems controls is one of the components of an organizational framework for security and control. Information systems controls consist of two - general and application control. A company must know how and where to deploy security tools and security personnel must know what controls a company must have in place to protect its information system. Contrast between General Controls and Application Controls. nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833375 1.General control – It govern design, security and use of computer programs and security of data files in general throughout organization’s information technology infrastructure. It also apply to all 
computerized application.  General control also combination of hardware, software and manual procedures to create overall control environment. 

2. Application control – it specific controls unique to each computerized application like payroll and order processing. It include both automated and manual procedures which to ensure that only authorized data are completely and accurately processed by that application.
]]> 2018-12-29 12:28:29 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833375 4 .Malicious Software programs are referred to as Malware. Describe FOUR (4) types of malicious software.  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833455 1.Viruses. Rogue software program that attaches itself to other software programs or data files in order to be executed.
2.Worms. Independent programs that copy themselves from one computer to other computers over a network.
3.Trojan horses. Software that appears benign but does something other than expected. For example, Zeus Trojan that runs on computers with MS Windows OS were used to steal login credentials for banking.
4.Spyware. Small programs install themselves surrptitiously on computers to monitor user web surfing activity and serve advertising.
]]> 2018-12-29 12:32:03 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833455 5.a) Nowadays securing information systems has become an important issue in organization to protect itself against computer crime. Define computer crime and provide an appropriate example.  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833506 Computer crime can be defines as any violations of criminal law that involve a knowledge of computer technology for their perpetration, investigation, or prosecution. For example, they will be using computer as their instrument to be a theft of trade secrets and using e-mails for threats or harassment where this can be called as identity theft where they will theft of personal information such as security ID.]]> 2018-12-29 12:34:01 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833506 5b) Briefly explain THREE (3) reasons why information systems are vulnerable to destruction, error and abuse?  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833964 1. Accessibility of networks where everyone at anytime can access with the system.
2. Wi-Fi networks can easily be penetrated by intruders using sniffer programs to obtain an address to access the resources of the network.
3. Software presents problems because software bugs may be impossible to eliminate and because software vulnerabilities can be exploited by hackers and malicious software.
]]> 2018-12-29 12:48:41 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833964 5.c) Discuss the THREE (3) most important tools and technology for safeguarding information resources.  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833997 1. Firewall. It prevents the accesses of private network or systems when connected to the internet from the unauthorized users.
2. Intrusion detecting systems. Monitors the private networks and provides access to the corporate systems.
3. authentication techniques. Provides authentication by passwords, tokens, biometric and smart card. 
]]> 2018-12-29 12:49:51 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316833997 6.a) Identity management software automates the process of keeping track of all information systems users and their system privileges, assigning each user a unique digital identity for accessing each system.  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834022 Authentication is the  process or action of verifying the identity of a user or process.]]> 2018-12-29 12:51:08 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834022 6.b) Identify and briefly describe FOUR (4) authentication technologies.  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834179 1. Iris scanner. An iris scan is a highly secure way to verify a person’s identity, even more so than a fingerprint scan or voice pattern recognition.
2. Voice Recognition Security System.Voice biometric authentication identifies an individual based on the patterns unique to each person’s voice. 
3. Palm Vein Pattern Authentication.The system records the pattern of veins in the hand, and is safe and accurate. The user does not need to directly touch the device.
4. Facial Recognition.A biometric software application capable of uniquely identifying or verifying a person by comparing and analyzing patterns based on the person's facial contours
]]> 2018-12-29 12:55:16 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834179 7.a) Describe ransomware.  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834274 A type of malicious software designed to block access to a computer system until a sum of money is paid.The motive for ransomware attacks is nearly always monetary, and unlike other types of attacks, the victim is usually notified that an exploit has occurred and is given instructions for how to recover from the attack. Payment is often demanded in a virtual currency, such as bitcoin]]> 2018-12-29 12:57:28 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834274 7. b) State how do we prevent and protect our computer from ransomware. nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834344 1. Do make sure that all systems and software are up-to-date with relevant patches
2.Use reputable antivirus software and a firewall.
]]> 2018-12-29 12:59:39 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834344 7.c) Discuss the effects of computer crime to an organization.  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834381 A company suffers losses due to computer crime when a hacker steals confidential information and future plans of the company. And he simply sells the information to a competitor company and they use the information to get benefits. Wastage of time is another problem because many IT personals spend a lot of time on handling harmful incidents which may be caused due to computer crimes. This time should be spend on the development. And if the company is attacked by a computer criminal it would cost a lot and much time is needed to recover from the loss.]]> 2018-12-29 13:00:57 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834381 Chapter 7: Securing Information Systems 1. Security isn’t simply a technology issue, it’s a business issue. Discuss. nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834479 Security become a business issue because all organisations depend on a wide variety of IT systems to enable and support their business processes. This ranges from email and instant messenger for communication, to document management systems for collaboration, to ERP systems for performing integrated business processes.

]]> 2018-12-29 13:05:41 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834479 2. Who poses the biggest security threat: insiders or outsiders?  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834518 Outsiders are more likely to act in a malicious way with a company’s data, but the source of the greatest risk is nearly always the insiders. Outside bad-actors are constantly looking for weaknesses to exploit, and the greatest vulnerability is typically careless or misguided actions by insiders. When insiders fail to be vigilant about protecting the fort, they fall victim to phishing schemes or social engineering attacks, or they open emails they don’t recognize, or they access corporate systems while sitting in an internet cafe or any one of the myriads of careless behaviors that create vulnerabilities. It is the insiders that provide opportunities for outsiders to storm the gates and cause damage.

]]> 2018-12-29 13:07:21 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834518 3. Suppose your business had an e-commerce Web site where it sold goods and accepted credit card payments. Discuss the major security threats to this Web site and their potential impact. What can be done to minimize these threats?  nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834542  E-commerce websites are vulnerable to fraud from internal and external sources. Fraud incidents include credit card fraud, which exposes the website to threat from clients and any other external sources and internal fraud. Any fraudulent transactions being entered into the system from employees. Such transactions can also be introduced into the system by hackers or Trojan Horses, which resemble the real customers’ transactions. To prevent fraud, Fraud scoring must be used. It is a system of predictive fraud detection models or technologies that payment processors use to identify the highest-risk transactions in card-not-present environment that require additional verification. All card-not-present transactions must be authorized before they are processed. The authorization response will typically be approval or decline. You should develop a process for handling transactions after the authorization response has been received and apply it consistently.]]> 2018-12-29 13:08:07 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834542 Case Study :1.Is cyberwarfare a serious problem? Why or why not? nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834701 Cyber warfare is becoming a very serious problem. Attacks have become much more widespread, sophisticated, and potentially devastating. The U.S. Department of Defense networks experience 250,000 probes every hour and cyber attacks on U.S. federal agencies in general have increased 150 percent since 2008. Cyberwarfare comes in the form of distributed denial-of-service attacks that have taken down Websites at the White House, the Treasury, the Federal Trade Commission, the Defense Department, the Secret Service, and many others. The 
attacks slowed down most of the U.S. sites and forced several sites in foreign countries to stop operating altogether. Over the years, hackers have stolen plans for missile tracking systems, satellite navigation devices, surveillance drones, and leading-edge jet fighters.
]]> 2018-12-29 13:13:50 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834701 2. What solutions are available for this problem? Do you think they will be effective? Why or why not? nliana246 https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834975 The solution that the country must take to prevent from this problem is Computer crimes or rules should therefore be established, maybe in combination with an organization monitoring the cyberspace, with large and serious consequences against states violating these rules. Cyber weapons won’t go away and their spread can’t be controlled. Instead, as we’ve done for other destructive technologies, the world needs to establish a set of principles to determine the proper conduct of governments regarding cyber conflict. They would dictate how to properly attribute cyber-attacks, so that we know with confidence who is responsible, and they would guide how countries should respond. ]]> 2018-12-29 13:23:41 UTC https://padlet.com/nliana246/kz89l7sz5qt2/wish/316834975