Wednesday, 16 April 2014

Computer Security

What is Computer Security?

Computer security is not only important to ensure trust with their users, it is necessary from the moment when a transfer of private data, as in the case of most companies today.

Computer Security is the protection of computing systems and the data that they store or access.

Why is Computer Security Important?

Computer Security allows the University to carry out its mission by:
  • Enabling people to carry out their jobs, education, and research
  • Supporting critical business process
  • Protecting personal and sensitive information

Why do I need to learn about Computer Security? Isn't this just an I.T. problem?

Good Security Standards follow the "90 / 10" Rule:
  • 10% of security safeguards are technical.
  • 90% of security safeguards rely on the computer user ("YOU") to adhere to good computing practices
Example: The lock on the door is the 10%. You remembering to lock the lock, checking to see if the door is closed, ensuring others do not prop the door open, keeping control of the keys, etc. is the 90%. You need both parts for effective security.

 A hacked computer can be used to.

  1. Send spam and phishing emails.
  2. Harvest and sell email addresses and passwords.
  3. Illegally distribute music, movies and software.
  4. Distribute child pornography.
  5. Infect other systems.
  6. Hide programs that launch attacks on other computers.
  7. Record keystrokes and steal passwords.
  8. Access restricted or personal information on your computer or other systems that you have access to.
  9. Generate large volumes of traffic, slowing down the entire system.
Of course, the answer is "All of the above." A compromised computer can be used for all kinds of surprising things.

Security Objectives

  • Learn "good computing security practices."
  • Incorporate these practices into your everyday routine. Encourage others to do so as well.
  • Report anything unusual - Notify the appropriate contacts if you become aware of a suspected security incident