ECDL/ICDL IT Security

1. Year 10 ICT ECDL/ICDL IT Security

2. What is it about? • This module sets out essential concepts and skills relating to the ability to understand main concepts underlying the secure use of ICT in daily life. It also teaches us to use relevant technologies and applications to maintain a secure network connection, use the internet safely and securely, and manage data and information appropriately.

3. Goals of this Module • Understand the key concepts relating to the importance of secure information and data, physical security, privacy and identity theft. • Protect a computer, device or network from malware and unauthorised access. • Understand the types of networks, connection types and network specific issues including firewalls. • Browse the World Wide Web and communicate on the internet securely. • Understand security issues related to communications including email and instant messaging. • Back up and restore data appropriately and safely, and securely dispose of data and devices.

4. 1 Security Concepts This section will introduce the main concepts underlying the secure use of ICT in daily life. It will explain threats to your data, and give you an understanding of measures you can take to protect it. 1.1 Data Threats When working with data, it is important to be aware of potential threats that may pose a security risk through the theft of or loss of the data. Once you are aware of potential threats, it is easier to protect yourself and your data against the outcome of these threats. Methods of protection will be covered later in this Module. 1.1.1 Distinguish between data and information Data are facts, numbers or images that are collected to be examined and considered, in order to help in decision-making. Information is the interpretation of this data in a structured way, in order to provide knowledge based on study, experience or instruction. For example, if you conduct a survey to ask 500 people of different ages and different professions how they use IT in their day- to - day lives, the answers these 500 people give to your questions are ‘data’. When you analyse this data, you obtain ‘information’, which gives you knowledge about how the use of IT is affected by age and profession.

5. Data Threats • When working with Data, it is important to be aware of potential threats that may pose a security risk through theft or loss of data. • Once you are aware of potential threats, it is easier to protect yourself against them.

6. Distinguishing between Data and Info • Data is facts, images and/or numbers that are collected to be examined and considered in order to help make decisions. • Information is the interpretation of this data in a structured way. • Example: You ask 200 people what type of phone they have. The answers you receive are classified as data. When you analyse this date, you get information.

7. Cybercrime • Cybercrime is the use of any computer, or network, to commit a crime. • Financial Scam • Computer Hacking • Downloading Pornographic Images from the Internet • Virus Attacks • Stalking by email • Creating Websites that promote racial hatred • Identity theft • Social Engineering.

8. Hacking, Cracking and Ethical Hacking • A hacker is an individual who attempts to bypass the security mechanisms of a network or information system. • A cracker is someone who exploits the weaknesses and security holes with malicious intent such as blocking accounts, or stealing information.

9. Hacking, Cracking and Ethical Hacking • Ethical hackers are computer security experts. They are employed by a company to attempt to bypass the security of said company’s information systems. The company can then act on this information, making their network safer.

10. Threats to Data • Force majeure relates to unforeseen events beyond the control of the company. Items include war, natural disasters, system crashes and corruption. • Employees can pose a risk to confidential information. They could pass information on to other people, or use it for their own advantage. They could even accidentally delete it.

11. Value of Information • Personal Information is any info or combination of information that enables the identification of an individual. • Personal information must be protected to prevent: • Internet based fraud • Identity Theft

12. Value of Information • Commercially Sensitive Information includes: • Statements of financial information • Information of a company’s pricing structure • Information in the nature of operating and financial information • Current client lists, production costs, hourly rates etc.

13. Value of Information • Commercially sensitive information must be protected to prevent: • Theft • Misuse of client details • Misuse of financial information

14. Preventing Unauthorized Access to Data • Using a username and have a good password • How strong is your password? (school, social media, home) • www.passwordmeter.com

15. Protecting Data • Data Encryption The process of transforming information (plaintext) using an algorithm (cipher) to make it unreadable to anyone except those possessing special knowledge. The resulting product is encrypted information (ciphertext). Reversing the process is called decryption.