Shofi Salsabila 18/429444/EK/22053
1
CHAPTER 8
Security refers to the policies, procedures, and technical measures used to prevent unauthorized
access, alteration, theft, or physical damage to information systems.
Controls are methods, policies, and organizational procedures that ensure the safety of the
organization’s assets, the accuracy and reliability of its records, and operational adherence to
management standards.
Malicious software programs are referred to as Malware and include a variety of threats such as
Computer Viruses (rogue software program that attaches itself to other software programs or
data files to be executed, usually without user knowledge or permission) , Worms (independent
computer programs that copy themselves from one computer to other computers over a network) ,
and Trojan Horses (software program that appears to be benign but then does something other
than expected).
Hacker is an individual who intends to gain unauthorized access to a computer system.
Spoofing may also involve redirecting a web link to an address different from the intended one,
with the site masquerading as the intended destination. A Sniffer is a type of eavesdropping
program that monitors information traveling over a network.
Denial-of-Service (DoS) attack , hackers flood a network server or web server with many
thousands of false communications or requests for services to crash the network.
Examples of computer crime :computers as targets of crime (accessing a computer system
without authority), computers as instruments of crime (theft of trade secrets).
Identity theft is a crime in which an imposter obtains key pieces of personal information, such as
social security numbers, driver’s license numbers, or credit card numbers, to impersonate
someone else.
Click fraud occurs when an individual or computer program fraudulently clicks an online ad
without any intention of learning more about the advertiser or making a purchase.
Global threats come from Cyberterrorism and Cyberwarfare. Internal threats come from
Employees.
Information systems controls are both manual and automated and consist of general and
application controls.
Firewalls, intrusion detection systems, and antivirus software can protect the system from
malware and intruders so that connecting to the internet is safe.
