Unit 12: Understanding The Need of Security Measures - Subjective Questions

Security in information technology refers to the protection of computer systems, networks, hardware, software, and data from unauthorized access, damage, theft, or disruption.

The three core objectives, often called the CIA Triad, are:

• Confidentiality: Ensuring that information is accessible only to those authorized to view it. It prevents unauthorized disclosure of sensitive data.
• Integrity: Ensuring that data remains accurate, complete, and unaltered except by authorized users. It prevents unauthorized modification.
• Availability: Ensuring that authorized users have reliable and timely access to information and resources when needed.

Together these objectives form the foundation of all security measures and guide how systems are designed and protected.

Basic security concepts help protect systems and data. Key concepts include:

• Authentication: The process of verifying the identity of a user or system. Common methods include passwords, PINs, biometrics (fingerprint, face recognition), and security tokens.
• Authorization: After authentication, this determines what resources a user is allowed to access and what actions they can perform (e.g., read, write, delete).
• Encryption: The process of converting readable data (plaintext) into an unreadable form (ciphertext) using an algorithm and a key, so that only authorized parties can decode it.
• Accounting/Auditing: Keeping logs of who accessed what and when, to detect misuse.

These concepts work together: authentication proves who you are, authorization defines what you can do, and encryption protects the data itself during storage and transmission.

Threats to users are risks that target the person using the system rather than just the machine. Major threats include:

• Identity Theft: Criminals steal personal information (name, ID numbers, bank details) to impersonate the victim for fraud.
• Phishing: Fraudulent emails or websites trick users into revealing sensitive information such as passwords or credit card numbers.
• Loss of Privacy: Personal information collected and misused without consent.
• Cyberstalking and Harassment: Using digital means to threaten or harass individuals.
• Malware Infections: Programs that can capture keystrokes (keyloggers) and steal personal data.

Effects on individuals:

• Financial loss due to fraud
• Damage to reputation
• Emotional stress and loss of trust
• Legal complications from misused identity

Users can defend themselves through strong passwords, awareness, and cautious online behavior.

Threats to hardware involve physical or environmental risks to computer equipment. Major threats include:

• Power-related problems: Power surges, spikes, blackouts, and brownouts can damage components or cause data loss. Voltage fluctuations can burn out circuits.
• Theft and vandalism: Physical stealing of devices or deliberate damage to equipment.
• Environmental hazards: Fire, flood, extreme heat, humidity, and dust can harm sensitive components.
• Natural disasters: Earthquakes, storms, and lightning strikes can destroy hardware.
• Accidental damage: Dropping devices, spilling liquids, or mishandling equipment.

Protective measures include:

• Using UPS (Uninterruptible Power Supply) and surge protectors
• Keeping equipment in secure, climate-controlled rooms
• Locking devices and using cable locks
• Maintaining proper ventilation and cleanliness

Protecting hardware ensures both equipment longevity and data safety.

Threats to data are risks that compromise the confidentiality, integrity, or availability of information. Common threats include:

• Malware: Viruses, worms, trojans, and ransomware that corrupt, delete, or lock data.
• Unauthorized access: Hackers gaining entry to steal or alter data.
• Data theft: Copying confidential files without permission.
• Accidental deletion or corruption: Human error or hardware failure damaging files.
• Data interception: Capturing data as it travels over networks (eavesdropping).

Why data is the most valuable asset:

• Hardware can be replaced by purchasing new equipment, but lost or stolen data may be irreplaceable.
• Data often contains sensitive business, personal, or financial information.
• Compromised data can lead to financial loss, legal issues, and loss of reputation.

Protecting data through backups, encryption, and access control is therefore critical.

Cyber terrorism is the use of computers, networks, and the internet by individuals or groups to carry out attacks intended to cause harm, fear, or disruption for political, religious, or ideological purposes.

Objectives of cyber terrorism:

• Disrupting critical infrastructure (power grids, banking, transportation, defense systems)
• Spreading fear and panic among the public
• Stealing or destroying sensitive government or military data
• Promoting propaganda and recruiting followers
• Causing economic damage

Potential impact on society:

• Failure of essential services such as electricity, water, and communication
• Massive financial losses to governments and businesses
• Loss of public confidence in digital systems
• Threat to national security
• In severe cases, loss of life if life-critical systems are attacked

Governments counter cyber terrorism through cybersecurity agencies, laws, monitoring, and international cooperation.

Keeping a system safe requires multiple layers of protection:

Software measures:

• Install and regularly update antivirus and anti-malware software
• Enable a firewall to control incoming and outgoing traffic
• Keep the operating system and applications updated with security patches

Access control measures:

• Use strong, unique passwords and change them periodically
• Enable two-factor authentication (2FA)
• Lock the screen when away from the computer

Data measures:

• Take regular backups of important data
• Use encryption for sensitive files

User behavior measures:

• Avoid opening suspicious email attachments or links
• Download software only from trusted sources
• Be cautious on public Wi-Fi networks

Combining these measures creates a strong defense against most common threats.

Both firewalls and antivirus software are essential protective tools, but they serve different purposes.

Firewall:

• Acts as a barrier between a trusted internal network and untrusted external networks (like the internet).
• Monitors and filters incoming and outgoing network traffic based on security rules.
• Blocks unauthorized access and prevents hackers from entering the system.
• Can be hardware-based or software-based.

Antivirus software:

• Detects, prevents, and removes malicious software (viruses, worms, trojans, spyware).
• Scans files, emails, and downloads for known threats using virus definitions.
• Provides real-time protection and periodic system scans.

Key differences:

Using both together provides comprehensive protection.

Protecting yourself online requires safe habits and awareness. Key practices include:

• Use strong passwords: Combine uppercase, lowercase, numbers, and symbols; avoid reusing passwords across sites.
• Enable two-factor authentication: Adds a second layer of verification beyond the password.
• Verify website security: Look for HTTPS and a padlock symbol before entering sensitive data.
• Beware of phishing: Do not click suspicious links or share personal details in response to unsolicited emails.
• Limit personal information: Share minimal personal data on social media and public sites.
• Keep software updated: Patches fix vulnerabilities that attackers exploit.
• Use secure networks: Avoid entering sensitive information on public Wi-Fi; use a VPN if needed.
• Log out of accounts: Especially on shared or public computers.

These steps significantly reduce the risk of identity theft, fraud, and account compromise.

Protecting your privacy means controlling how much of your personal information is collected, shared, and used by others online.

Why privacy matters:

• Personal data can be misused for fraud, targeted advertising, or profiling.
• Loss of privacy can lead to identity theft and reputational harm.

Steps to maintain online privacy:

• Adjust privacy settings on social media and online accounts to limit who sees your information.
• Be cautious about sharing personal details such as address, phone number, or financial data.
• Read privacy policies to understand how websites use your data.
• Use private/incognito browsing to reduce tracking.
• Manage cookies and clear browsing history regularly.
• Avoid oversharing on public forums and social networks.
• Use encryption and secure connections (HTTPS, VPN).
• Disable location tracking when not needed.

Maintaining privacy is an ongoing responsibility that combines technical settings with careful behavior.

Cookies are small text files that websites store on a user's computer to remember information about the user and their browsing activity.

Purpose of cookies:

• Remember login details and preferences
• Keep items in a shopping cart
• Track browsing behavior for personalized content and advertising

Types of cookies:

• Session cookies: Temporary; deleted when the browser is closed.
• Persistent cookies: Remain stored for a set period, remembering preferences across visits.
• First-party cookies: Set by the website being visited.
• Third-party cookies: Set by other domains (often for advertising and tracking).

Managing cookies:

• Access browser settings to view, block, or delete cookies.
• Set the browser to ask before accepting cookies.
• Block third-party cookies to reduce tracking.
• Use private/incognito mode to prevent storing cookies.
• Regularly clear cookies to remove stored tracking data.

Managing cookies helps balance convenience with privacy protection.

Spyware is a type of malicious software that secretly monitors a user's activities and collects information without their knowledge or consent.

How spyware works:

• It installs silently, often bundled with free software or through malicious downloads.
• It runs in the background, tracking keystrokes, browsing habits, and personal data.
• It sends the collected information to third parties.

Effects of spyware:

• Theft of sensitive data (passwords, credit card numbers)
• Slowing down of the computer and consuming resources
• Unwanted pop-up advertisements
• Loss of privacy and possible financial fraud

Protection against spyware:

• Install and update anti-spyware/anti-malware software
• Avoid downloading software from untrusted sources
• Read installation prompts carefully to avoid bundled programs
• Keep the operating system and browser updated
• Use a firewall and enable pop-up blockers

Regular scanning and cautious downloading are the best defenses.

These are all types of malware but behave differently:

Virus:

• Attaches itself to a legitimate file or program.
• Requires user action (like opening a file) to activate and spread.
• Can corrupt or delete data and damage the system.

Worm:

• A standalone program that replicates itself.
• Spreads automatically across networks without user action.
• Consumes bandwidth and system resources, often causing slowdowns.

Trojan Horse:

• Disguises itself as legitimate or useful software.
• Does not self-replicate.
• Once run, it creates backdoors, steals data, or allows remote control.

All three can be countered with antivirus software and safe computing habits.

Keeping data secure involves protecting information from unauthorized access, alteration, or loss.

Techniques for data security:

• Encryption: Converts data into unreadable form so only authorized users can access it.
• Access control: Uses passwords, permissions, and user roles to restrict access.
• Authentication: Verifies identity before granting access.
• Regular backups: Ensures data can be recovered if lost or corrupted.
• Antivirus and firewalls: Protect against malware and unauthorized network access.
• Physical security: Locking servers and storage devices.
• Data disposal: Securely wiping or destroying old storage media.

Why data security is essential:

• For individuals: Protects personal, financial, and private information from theft and misuse.
• For organizations: Safeguards confidential business data, maintains customer trust, ensures legal compliance, and prevents financial and reputational damage.

Data security is a shared responsibility requiring both technology and disciplined practices.

Data backup is the process of creating copies of data so it can be restored if the original is lost, corrupted, or destroyed.

Types of backup:

• Full backup: Copies all selected data. Complete but time-consuming and storage-heavy.
• Incremental backup: Copies only the data changed since the last backup (of any type). Fast and space-efficient but restoration is slower.
• Differential backup: Copies all data changed since the last full backup. Balances speed and restore time.

Backup storage options:

• External hard drives and USB drives
• Network-attached storage (NAS)
• Cloud storage services
• Optical media (DVDs)

Importance of a good backup strategy:

• Protects against data loss from hardware failure, malware, theft, or disasters
• Ensures business continuity
• Follows the 3-2-1 rule: keep 3 copies of data, on 2 different media, with 1 copy off-site
• Enables quick recovery, minimizing downtime

Regular, tested backups are the most reliable defense against permanent data loss.

Safeguarding hardware protects physical computer equipment from damage, theft, and environmental hazards.

Protection from power problems:

• Use a UPS (Uninterruptible Power Supply) to provide backup power and prevent data loss during outages.
• Use surge protectors to guard against voltage spikes.
• Use voltage regulators to maintain stable power.

Protection from theft:

• Use cable locks and secure enclosures.
• Restrict physical access to server rooms.
• Use security cameras and alarms.

Protection from environmental hazards:

• Maintain proper temperature and humidity control (air conditioning).
• Keep equipment away from dust, water, and direct sunlight.
• Install fire detection and suppression systems.

General care:

• Handle devices carefully to avoid drops and spills.
• Clean equipment and ensure proper ventilation.
• Perform regular maintenance.

Protecting hardware also protects the valuable data stored on it.

Phishing is a fraudulent technique where attackers impersonate trustworthy entities to trick users into revealing sensitive information such as passwords, credit card numbers, or personal details.

How phishing is carried out:

• Email phishing: Fake emails appearing to be from banks or well-known companies, urging urgent action.
• Spoofed websites: Fake login pages that look identical to real ones to capture credentials.
• Spear phishing: Targeted attacks on specific individuals using personalized information.
• Smishing and vishing: Phishing through SMS messages or phone calls.

Measures to avoid phishing:

• Do not click links or download attachments from unknown or suspicious emails.
• Verify the sender's email address carefully.
• Check for HTTPS and correct URLs before entering credentials.
• Never share passwords or OTPs in response to requests.
• Use spam filters and keep security software updated.
• Be suspicious of messages creating urgency or offering unrealistic rewards.

Awareness and caution are the strongest defenses against phishing.

A comprehensive security framework combines technical, physical, and administrative measures to protect all assets.

1. Protecting Users:

• Enforce strong password policies and two-factor authentication
• Conduct security awareness training to counter phishing and social engineering
• Define access rights based on job roles (principle of least privilege)

2. Protecting Hardware:

• Use UPS, surge protectors, and stable power supplies
• Secure server rooms with locks, cameras, and restricted access
• Control the environment (temperature, humidity, fire suppression)

3. Protecting Data:

• Encrypt sensitive data at rest and in transit
• Implement regular backups following the 3-2-1 rule
• Use access controls and audit logs

4. Network and System Security:

• Deploy firewalls and antivirus/anti-malware software
• Apply regular security updates and patches
• Monitor networks for intrusions

5. Administrative Measures:

• Establish security policies and procedures
• Plan for incident response and disaster recovery
• Ensure legal and regulatory compliance

How they work together:
These layers form a defense-in-depth strategy. If one layer fails (e.g., a user clicks a phishing link), other layers (firewalls, access controls, backups) limit the damage. Combining people, processes, and technology creates a resilient framework that reduces risk and enables quick recovery when incidents occur.

Threats in computing can be grouped by what they target. Understanding these differences helps in choosing the right protection.

Threats to Hardware:

• Nature: Physical and environmental (power surges, theft, fire, floods).
• Impact: Damage or loss of equipment; indirect data loss.
• Protection: UPS, surge protectors, locks, secure rooms, climate control.
• Example: A power surge burning out a motherboard.

Threats to Data:

• Nature: Logical (malware, unauthorized access, corruption, interception).
• Impact: Loss, alteration, or theft of valuable information.
• Protection: Encryption, backups, access control, antivirus, firewalls.
• Example: Ransomware encrypting company files.

Threats to Users:

• Nature: Social and personal (identity theft, phishing, cyberstalking).
• Impact: Financial fraud, privacy loss, emotional harm.
• Protection: Awareness training, strong passwords, cautious online behavior, privacy settings.
• Example: A phishing email stealing a user's banking credentials.

Comparison summary:

Conclusion: Hardware protection is largely physical, data protection is largely technical, and user protection is largely behavioral. Since these threats are interconnected (e.g., a stolen laptop threatens both hardware and data), a complete security plan must address all three categories together.

Malware (malicious software) is any program designed to damage, disrupt, or gain unauthorized access to a computer system.

Types of malware:

• Virus: Attaches to files and spreads when the file is executed; corrupts data.
• Worm: Self-replicating program that spreads across networks without user action.
• Trojan Horse: Disguised as legitimate software; creates backdoors or steals data.
• Ransomware: Encrypts data and demands payment for its release.
• Spyware: Secretly monitors and collects user information.
• Adware: Displays unwanted advertisements and may track browsing.
• Rootkit: Hides deep in the system to give attackers persistent control.
• Keylogger: Records keystrokes to capture passwords and sensitive data.

Complete defense strategy:

1. Preventive measures:

• Install reputable antivirus/anti-malware software and keep it updated.
• Enable a firewall to block unauthorized traffic.
• Keep the OS and applications patched and updated.

2. Safe practices:

• Avoid downloading from untrusted sources.
• Do not open suspicious email attachments or links.
• Scan external devices before use.

3. Data protection:

• Maintain regular backups so data can be restored after an attack (critical against ransomware).
• Use encryption for sensitive data.

4. Monitoring and response:

• Run regular scans and monitor system behavior.
• Have an incident response plan to isolate and remove infections.

Conclusion: No single tool guarantees protection. A layered approach combining updated software, cautious user behavior, regular backups, and monitoring provides the strongest defense against the wide range of malware threats.