Companies such as this are required not only legally, but ethically to protect the customers’ private information or be held accountable by law. It is also bad practice to allow this sensitive information to be disseminated and stolen by cyber criminals. Since this kind of data must be protected at all costs, certain regulations were put in place so that standards for information security could be monitored. One of these standards is that all personal information is to be encrypted when being sent over the internet and also on the servers. This will make it much harder for the hacker to access the information easily.
Networked Systems Security Task 1 – THREATS AND IMPACT OF NETWORK THREATS There are many types of threats that can damage your computer either temporarily or permanently. Some threats posed may not threaten your computer right away however have the potential to do so. Some threats that present themselves can include physical threats such as the theft of equipment whether that is the monitor, computer etc. Other threats can be harder to find such as viruses, worms or any kind of malware. Understanding these threats allows the organisation to prevent, protect and correct any damage done to his/her computer to an extent.
Kostadinov goes on to note that most cyberterrorism actions are generally focused on website sabotage and email blasting. In order to prove that the network breach was a terrorist attack the company would need to provide electronic evidence of these types of information warfare. Information warfare is a term often used interchangeably with cyberterrorism but provides a deeper understanding in the shift of how data has become fundamental to society. As governments, companies and people shift to the use of digital information so have the methods used to attack (Gilmer, 2001). In order to combat this aspect of terrorism, the military have adopted computer forensics as part of their defenses (Vacca & Rudolph, 2011).
Similarly, technology has had a significant impact on how laws have had to be created and reformed in order to protect the rights of consumers. The main problem associated with technology is the lack of regulation in the environment, making consumers particularly vulnerable to illegal practices, as well as the lack of international jurisdiction. Law reform has led to arrest warrants and extradition treaties being able to be issued, and assets of a foreign online marketer can be frozen if information is obtained about their location, amongst many other legal responses, and hence the legal system generally offers adequate protection against the misuse of
However, the Department of Veterans Affairs believes that the hackers were serious because they obtained basic information such as names, SSN and birthdays and later used for malicious criminal activity. The Department of Veterans Affairs believes that the main cause behind the security data breach was IT individuals that failed to follow the proper procedures for network equipment that stored veteran’s data. The individual can use the advantage of using veteran’s vital information to purchase items, obtaining credit cards, and obtaining medical care with the use of illegal obtained documents. There could have been a major economic consequence or implication of the data or information security breach. The Department of Veterans Affairs estimates there could have been a billion dollar loss owing to the hacking or unauthorized access to the information.
Other types of risks that BUGusa, Inc. can potentially face without property protection and poor management are: loss in customer trust, penalties for law violations, compliance risk, availability risk, access risk, and more. (Priviti, 2008) B. Discuss in detail what types(s), if any, of civil liability Steve and/or WIRETIME may face if caught. a. BUGusa is facing the issues of their work being stolen and internet hacking. Not to mention WIRETIME is unethical in their actions.
I would change the administrative passwords on all systems routinely, implement a firewall program with remote access control which will not allow, hackers entry to your company’s system. Without passwords being assigned to data and systems, this simply protection becomes a target for hackers. Identity theft occurs in some of the largest companies and often times this security breach is kept quiet. This company has been hacked for customer’s birthdates twice in one month. This means that they are experiencing severe vulnerabilities and they need to take action immediately.
The risks that exist would come from a suspecting end-user, potentially some form of malware, that would be installed through an open port, thus causing the integrity of a machine on that network to be severely compromised (Lawrence, 2000). Ping sweeps and port scans are two direct unsuspecting threats that, like other cyber threats, are not to be ignored. The ease of gaining access by using these threat sources is something that a business should be aware of and be prepared to address when faced with being at the end of a cyber-attack. Implementing appropriate policy to counteract such a malicious and serendipitous attack on network vulnerabilities should be considered as an additional failsafe. Protection is the key and showing extra caution can at least reduce the
Case Study 3 Andrew Kutanovski DeVry University Having a secure network is not an easy task to accomplish. You must cover every aspect that could possibly give an outsider the ability to gain unsecure access to the network. By having loopholes and backdoors, all of the vital information on the network is at risk of being stolen. To prevent this from happening, you must secure all incoming and outgoing information. This is called encryption; it’s the process of making an original message unreadable to unauthorized individuals.
Two basic approaches are used in deliberate attacks on computer systems: data tampering and programming attack. Data tampering is a common means of attack that refers to an attack when someone enters false, fabricated or fraudulent data into a computer or changes or deletes existing data. This is the method often used by insiders and fraudsters and is extremely serious because it may not be detected. Programming attacks are popular with computer criminals that use programming techniques to modify other computer programs. For these types of crimes, programming skill and knowledge of the targeted systems are needed.