Expertiza_Wiki - User contributions [en]

User:Jroverto

2008-11-27T18:16:23Z

Jroverto:

Security Precautions

2008-08-11T18:40:14Z

Jroverto: /* Bibliography */ added "new" image to links

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.
**For individuals, protecting their computer from the majority of the security concerns that it might face from the Internet is simply a matter of installing a good [http://anti-virus-software-review.toptenreviews.com/ anti-virus program] and a good [http://anti-spyware-review.toptenreviews.com/ anti-spyware program]. Some products even bundle these features together so that a user only needs to concern themselves with installing one protection suite to cover all of the potential threats.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The twenty most critical Internet security vulnerabilities: the experts consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - [[Image:new.gif]]
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet firewalls and security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home network security] ''CERT Coordination Center''
*[http://www.addsecure.net/breach.htm Media examples of security breaches] ''ADDSecure.Net, Inc.''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank security breach affected almost 500,000] ''NBC30.com'' - [[Image:new.gif]]
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A chronology of data breaches] ''Privacy Rights Clearinghouse/UCAN'' - [[Image:new.gif]]
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - [[Image:new.gif]]
*[http://www.cert.org/other_sources/viruses.html Computer virus resources] ''Cert.org'' - [[Image:new.gif]]
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - [[Image:new.gif]]
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure anti-virus] ''f-secure.com'' - [[Image:new.gif]]
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - [[Image:new.gif]]

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - [[Image:new.gif]]
*[http://www.selfseo.com/story-11606.php Renew and update your anti-virus software today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million credit card numbers hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - [[Image:new.gif]]
*[http://www.wral.com/golo/blogpost/3217420/ Unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - [[Image:new.gif]]
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - [[Image:new.gif]]
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - [[Image:new.gif]]
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What hackers know about your network - that you don't!] Thomas Raef, ''Ezine Articles'' - [[Image:new.gif]]
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP firewall] ''Microsoft.com'' - [[Image:new.gif]]
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista firewall] ''Microsoft.com'' - [[Image:new.gif]]

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the line: ethics for the security professional] ''SecureWorks.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of ethics] ''Sage-au.org.au''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - [[Image:new.gif]]
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - [[Image:new.gif]]
*[http://www.giac.org/overview/ethics.php GIAC code of ethics] ''Global Information Assurance Certification'' - [[Image:new.gif]]

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading security awareness for OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t fall victim to Internet fraud] Eric Buck ''SELF SEO''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - [[Image:new.gif]]
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime treaty: what it means to you] Larry Downes, ''CIOInsight.com'' - [[Image:new.gif]]
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - convention on cybercrime] ''Council of Europe Convention on Cybercrime'' - [[Image:new.gif]]
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s message to the Senate on the council of Europe convention on cybercrime'' - [[Image:new.gif]]
*[http://www.cybercrime.gov/COEFAQs.htm Cybercrime.gov] ''US Dept of Justice'' - [[Image:new.gif]]
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime treaty] ''Wikipedia.org'' - [[Image:new.gif]]
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar alarm catches hackers on the net] Will Knight, ''ZDNet.co.uk'' - [[Image:new.gif]]
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - [[Image:new.gif]]
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of vulnerability scanners] ''windowhaxor.net'' - [[Image:new.gif]]
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT security outsourcing] Jay A Milne, ''NetworkComputing.com'' - [[Image:new.gif]]
*[http://www.uscities.net/webnovice/safe_surf.htm A parents guide to safe surfing] Phillip Elam, ''uscities.net'' - [[Image:new.gif]]
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - [[Image:new.gif]]
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-ten Internet filter software] ''TopTenReviews.com'' - [[Image:new.gif]]
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - [[Image:new.gif]]

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - [[Image:new.gif]]

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

CSC 379 SUM2008:Week 5, Group 3

2008-08-11T13:52:29Z

Jroverto: /* Links */ labeled links

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking can be in any number of disguises. For example: threatening or harassing email, flaming (online verbal abuse), mass unsolicited email, identity theft, leaving improper messages at guestbooks or newsgroups from you, initiating directed computer viruses, pedophile activity, or email forgery (sending false or damaging email from you, usually to people you know like coworkers, employers, neighbors, etc.). Unfortunately, cyberstalkers sometimes step out of cyberspace and into the physical world by stealing your identity, luring unsuspecting victims for a first meeting, vandalizing your home, office, or vehicle, sending threatening or obscene mail, making abusive and excessive phone calls, or whatever else the criminal mind can imagine.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking has become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

=== When Cyberstalking Becomes Real ===

Thankfully, very few cases of cyberstalking have progressed beyond the Internet but in some of those few cases that have, the results have been tragic and as such, it sets the premise that cyberstalking should be taken just as seriously as physical stalking. In 1999, [http://epic.org/privacy/boyer/ one such case] resulted in the murder of Amy Boyer by her cyberstalker Liam Youens. Using information that he acquired through the Internet, Youens traveled to Boyer's workplace where he fatally shot her before taking his own life. In another case, a woman's address and phone number were posted on an Internet Usenet newsgroup by an ex-boyfriend along with a message that she fantasized about being raped. Within a matter of days, [http://archives.cnn.com/2000/TECH/computing/06/12/cyberstalkers.idg/index.html six men] came to the woman's home saying that they wanted to rape her.

Even more frightening is the case of John Robinson, the topic of a [http://www.amazon.com/exec/obidos/ASIN/0743226356/truecrimes-20 novel by John Duglas]. In the late [http://www.trutv.com/library/crime/serial_killers/predators/john_robinson/index.html 1990's], Robinson used Internet chat rooms to stalk his victims and lure them into moving to Kansas under the false promise that they were moving there to be with their ideal man. On the contrary, the woman disappeared as soon as they reached Kansas as victims to the first Internet serial-killer. In all, 6 women were murdered by Robinson with a possibility of 5 others.

== Cyberstalking Tools and Methods ==

With the internet providing new avenues for stalkers to pursue victims by a few clicks of the mouse or keystrokes, how does this alter the physical and virtual landscape of stalking? Victim service providers report that the “Internet is rapidly becoming another weapon used by batterers against their victims. Just as in real life, abused women can be followed in cyberspace by their batterers, who may surreptitiously place their target under surveillance without her knowledge and use the information to threaten her or discredit her” [www.usdoj.gov ]. Cyberstalkers can take advantage of the impersonal, non-confrontational, and anonymous nature of the web, sending harassing or threatening messages by the simple push of a button. More sophisticated cyber prowlers use programs to send messages to victims at regular or random intervals, even going so far as to post controversial messages in internet chat rooms or on “revenge” bulletin boards. With minimal effort and possibly total anonymity, cyberstalkers are navigating a whole new arena where intellect and tech-skills replace body and brawn to frighten and intimidate victims.

== U.S. Policy==
"Make no mistake: this kind of harassment can be as frightening

and as real as being followed and watched in your neighborhood or

in your home." - Vice President Al Gore

Recognizing this emerging problem, Vice President Al Gore asked the Attorney General on February 26, 1999, to study the problem and to report back with recommendations on how to protect people from this threat. As a result an Anti-stalking bill passed by Congress makes it a federal crime to "annoy" someone over the Internet. In 2004, the U.S. Court of Appeals for the 6th Circuit used that reasoning to uphold the conviction of Erik Bowker, an Ohio man who had stalked a Youngstown television reporter via telephone.

But in 1999, a federal appeals court in Washington, D.C., ruled that a man could not be prosecuted for "annoying" conduct because he had telephoned the U.S. attorney seven times to complain about a case that had been brought against him. The calls, the court found, were political speech protected by the First Amendment. David Hudson, a lawyer with the First Amendment Center, a speech-rights advocacy group in Nashville, says the different ways that courts have interpreted the word "annoy" make the anti-stalking law "ripe for a challenge."

Law enforcement agencies have estimated that electronic communications are a factor in from 20 percent to 40 percent of all stalking cases. Forty-five states now have laws that explicitly include electronic forms of communication within stalking or harassment laws. State laws that do not include specific references to electronic communication may still apply to those who threaten or harass others online, but specific language can make the laws easier to enforce.

[http://www.ncsl.org/programs/lis/cip/stalk99.htm State Cyberstalking laws]

==Links==

* [http://en.wikipedia.org/wiki/Cyberstalking Wikipedia - Cyberstalking]
* [http://ethics.csc.ncsu.edu/privacy/cyberstalking/ NCSU Ethics - Cyberstalking]
* [http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279 Oxford Journals]
* [http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml The Daily Aztec]
* [http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm USA Today, Facebook stalking]
* [http://www.sfwa.org/gateway/stalking.htm Cyberstalking and Internet safety FAQ]
* [http://www.karisable.com/crpcstalk.htm Cyberstalking and harassment]
* [http://www.usatoday.com/tech/news/techpolicy/2006-02-14-cyberstalking-law_x.htm USA Today, Cyberstalking law]

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T02:33:33Z

Jroverto: /* When Cyberstalking Becomes Real */

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

=== When Cyberstalking Becomes Real ===

Thankfully, very few cases of cyberstalking have progressed beyond the Internet but in some of those few cases that have, the results have been tragic and as such, it sets the premise that cyberstalking should be taken just as seriously as physical stalking. In 1999, [http://epic.org/privacy/boyer/ one such case] resulted in the murder of Amy Boyer by her cyberstalker Liam Youens. Using information that he acquired through the Internet, Youens traveled to Boyer's workplace where he fatally shot her before taking his own life. In another case, a woman's address and phone number were posted on an Internet Usenet newsgroup by an ex-boyfriend along with a message that she fantasized about being raped. Within a matter of days, [http://archives.cnn.com/2000/TECH/computing/06/12/cyberstalkers.idg/index.html six men] came to the woman's home saying that they wanted to rape her.

Even more frightening is the case of John Robinson, the topic of a [http://www.amazon.com/exec/obidos/ASIN/0743226356/truecrimes-20 novel by John Duglas]. In the late [http://www.trutv.com/library/crime/serial_killers/predators/john_robinson/index.html 1990's], Robinson used Internet chat rooms to stalk his victims and lure them into moving to Kansas under the false promise that they were moving there to be with their ideal man. On the contrary, the woman disappeared as soon as they reached Kansas as victims to the first Internet serial-killer. In all, 6 women were murdered by Robinson with a possibility of 5 others.

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
* http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm
* http://www.sfwa.org/gateway/stalking.htm
* http://www.karisable.com/crpcstalk.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T02:25:42Z

Jroverto: /* When Cyberstalking Becomes Real */

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

=== When Cyberstalking Becomes Real ===

Thankfully, very few cases of cyberstalking have progressed beyond the Internet but in some of those few cases that have, the results have been tragic. In 1999, [http://epic.org/privacy/boyer/ one such case] resulted in the murder of Amy Boyer by her cyberstalker Liam Youens. Using information that he acquired through the Internet, Youens traveled to Boyer's workplace where he fatally shot her before taking his own life. In another case, a woman's address and phone number were posted on an Internet Usenet newsgroup by an ex-boyfriend along with a message that she fantasized about being raped. Within a matter of days, [http://archives.cnn.com/2000/TECH/computing/06/12/cyberstalkers.idg/index.html six men] came to the woman's home saying that they wanted to rape her.

Even more frightening is the case of John Robinson, the topic of a [http://www.amazon.com/exec/obidos/ASIN/0743226356/truecrimes-20 novel by John Duglas]. In the late [http://www.trutv.com/library/crime/serial_killers/predators/john_robinson/index.html 1990's], Robinson used Internet chat rooms to stalk his victims and lure them into moving to Kansas under the false promise that they were moving there to be with their ideal man. On the contrary, the woman disappeared as soon as they reached Kansas as victims to the first Internet serial-killer. In all, 6 women were murdered by Robinson with a possibility of 5 others.

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
* http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm
* http://www.sfwa.org/gateway/stalking.htm
* http://www.karisable.com/crpcstalk.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T02:25:18Z

Jroverto: /* When Cyberstalking Becomes Real */

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

=== When Cyberstalking Becomes Real ===
<Work in Progress>

Thankfully, very few cases of cyberstalking have progressed beyond the Internet but in some of those few cases that have, the results have been tragic. In 1999, [http://epic.org/privacy/boyer/ one such case] resulted in the murder of Amy Boyer by her cyberstalker Liam Youens. Using information that he acquired through the Internet, Youens traveled to Boyer's workplace where he fatally shot her before taking his own life. In another case, a woman's address and phone number were posted on an Internet Usenet newsgroup by an ex-boyfriend along with a message that she fantasized about being raped. Within a matter of days, [http://archives.cnn.com/2000/TECH/computing/06/12/cyberstalkers.idg/index.html six men] came to the woman's home saying that they wanted to rape her.

Even more frightening is the case of John Robinson, the topic of a [http://www.amazon.com/exec/obidos/ASIN/0743226356/truecrimes-20 novel by John Duglas]. In the late [http://www.trutv.com/library/crime/serial_killers/predators/john_robinson/index.html 1990's], Robinson used Internet chat rooms to stalk his victims and lure them into moving to Kansas under the false promise that they were moving there to be with their ideal man. On the contrary, the woman disappeared as soon as they reached Kansas as victims to the first Internet serial-killer. In all, 6 women were murdered by Robinson with a possibility of 5 others.

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
* http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm
* http://www.sfwa.org/gateway/stalking.htm
* http://www.karisable.com/crpcstalk.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T02:06:40Z

Jroverto: /* Links */

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

=== When Cyberstalking Becomes Real ===
<Work in Progress>

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
* http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm
* http://www.sfwa.org/gateway/stalking.htm
* http://www.karisable.com/crpcstalk.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T01:53:56Z

Jroverto: /* When Cyberstalking Becomes Real */

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

=== When Cyberstalking Becomes Real ===
<Work in Progress>

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
* http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm
* http://www.sfwa.org/gateway/stalking.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T01:35:51Z

Jroverto:

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

=== When Cyberstalking Becomes Real ===

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
* http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm
* http://www.sfwa.org/gateway/stalking.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T01:18:26Z

Jroverto: /* Links */

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
* http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm
* http://www.sfwa.org/gateway/stalking.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T01:09:35Z

Jroverto: /* What Is Cyberstalking */ - fixing minor details

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, web-cameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obsession at looking at their victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace their victims IP address to find their home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
*http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm

CSC 379 SUM2008:Week 5, Group 3

2008-08-09T01:06:13Z

Jroverto: /* Soical Networks */ - fixing minor details

== Cyberstalking ==

=== What Is Cyberstalking ===

Cyberstalking is use of the internet in order to stalk someone.

With the recently buildup of social networks, webcameras, and other means of online communications, Cyberstalking was become a serious issue. These stalkers begin by using search engines or social networks to find a person. Once they have accomplished that this stalker creates an obession at looking at thier victims information. Many times cyberstalking escalates even further to where cyberstalkers will try to trace thier victims IP address to find thier home and/or work place.

=== Social Networks ===

Social networks are a huge part of many peoples lives today. Such networks as [http://www.facebook.com Facebook] and [http://www.myspace.com MySpace,] just to name two giants, have around 100 millions users each and are still growing. These social networks provide many people with entertainment and ways to keep in touch with friends, however; these sites are also gateways for cyberstalkers to find victims.

*'''MySpace and Cyberstalkers'''

MySpace is a huge social network that started in August of 2003. On MySpace users can post pictures, videos, and put information in an "About Me" section. While this seems standard of any social networking site, MySpace has numerous account of cyberstalking. To be able to create an account of MySpace a user has to be at least 14 years old. Thankfully, anyone whose age is set from 14-15 has their profile automatically set to private. These teens have become under scrutiny for the racy pictures they are putting on their profiles. Recently there have even been television commercials warning teens to be cognizant of what they put on their profiles.

Cyberstalking has become big news to MySpace users. As [http://www.comscore.com/press/release.asp?press=1019 comscore] has released an article saying that MySpaces audience continues to shift towards an older demographic. Although many of these older users are harmless, the threat of pedophiles still exists. Many teens post personal information and pictures naively thinking that only their friends are going to see them. Besides these adults gaining and possibly abusing MySpace, there is also an abundance of younger users providing an incorrect, older age in order to gain access to MySpace. This sets the stage for cyberstalking of young children. Wired recently published an [http://blog.wired.com/27bstroke6/2007/07/29000-sex-offen.html#previouspost article] discussing how myspace is having to deal with over 29,000 sex offenders accessing its site.'

Young children are not always the target of cyberstalking, Wired also posted an [http://blog.wired.com/27bstroke6/2008/01/more-charges-in.html article] discussing how a hacker took control of a internet celebrities MySpace account and demanded sexual pictures in return for the account. There have also been [http://www.wftv.com/news/15369433/detail.html instances] where users find themselves being physically stalked by people who find them on MySpace. This stalking is very serious as it can lead other serve crimes.

*'''Facebook and Cyberstalkers'''

Facebook cyberstalkers or "creepers" as they are called in parody videos, are no joking matter. Sure in the videos it's the guy trying to get a laugh or some girl who is way too concerned about what everyone else is doing, but in the real world, Facebook stalking can be very dangerous.

With the recent glitch found in Facebook's search options users need to begin to rethink their privacy. Stalkers can find anything from your sex, ethnicity, sexual preference, and many other once thought private items simply utilizing a glitch in Facebook's advanced search option. This person can learn many thing about you without ever adding you as a "friend." To battle this glitch Facebook opened up the [http://www.marketingpilgrim.com/2007/08/facebook-glitch-reveals-source-code-is-it-theirs-anyway.html source code of the search page], making it more vulnerable to hackers, competitors, and stalkers alike.

According to an online source, Facebook is becoming the new Big Brother. While you may think that only your friends are looking at your profiles, there are many others such as employers who may look at your profile with or without your acknowledgment. The more information people put on Facebook, the more these people are at risk. Although employers are not necessarily the bad guy, there are others such as discussed in the MySpace topic above with more malicious intents.

*'''What To Do and Ethics'''

How can users keep themselves safe? There are many options. First off a user can get rid of their account. Although this option seems a bit irrational, it is the safest. The second is to go and locate the privacy options for your profile. here users can get many options. They can specify individual people and what those people have access to on their profile. They can set restrictions for all of their "friends." Or they can set it to allow any user to look at their profile. If there is a parent who is concerned about his/her child getting on these sites, the parent can get an internet filter set up to block access to these sites.

The ethics behind Facebook and MySpace come down to a few topic:

*Should their be more default privacy for users who are new to the service?

*In stalking cases should the companies assume some sort to liability?

*Should the companies take more initiative to make sure that users are of age and to keep sex offenders out?

==Topics to Cover==
Provide a general overview of cyberstalking as it occurs today. Discuss recent instances and analyze the ethics. What ethical considerations are raised by tools that facilitate cyber-stalking? Should threats of violence through cyberstalking be considered the same as in-person threats or threats communicated through traditional means?

==Links==

* http://en.wikipedia.org/wiki/Cyberstalking
* http://ethics.csc.ncsu.edu/privacy/cyberstalking/
* http://brief-treatment.oxfordjournals.org/cgi/content/abstract/5/3/279
* http://media.www.thedailyaztec.com/media/storage/paper741/news/2008/01/31/City/Cyberstalkers.Pose.A.Dangerous.Threat-3178798.shtml
*http://www.usatoday.com/tech/webguide/internetlife/2007-03-07-facebook-stalking_N.htm

Talk:CSC 379 SUM2008:Week 4, Group 4

2008-08-06T12:34:36Z

Jroverto:

<Jason>CJ & Reid, I have an Assembly exam @ 3:30 today which means that I will be online around 7pm to work on this. --[[User:Jcsmith2|Jcsmith2]] 13:27, 1 August 2008 (EDT)

<Reid> I'll be working on it at approximately 7PM also.

<Reid> I'll work on the "Why it's useful" section if that's OK with you guys

<Reid> I added information to the "is it bad" section. Feel free to modify it. Also, feel free to modify what I wrote for the "Why is it useful" section.

<Jason>I think we should add one statement regarding the non-disclosure of the printer manufacturers. That's a key component of the ethical discussion. -> Is it a bad idea?
Also, one of the reviewers suggested that "Is it a bad idea?" is bad grammar. Perhaps we should re-title this section? --[[User:Jcsmith2|Jcsmith2]] 21:05, 4 August 2008 (EDT)

ORIGINAL ASSIGNMENT:
What if every page you print from a color printer were labeled with a hidden code, detailing the printer the page was printed from, the date of printing and the time of printing, down to the minute? What if this feature was intentionally hidden from the user and could not be disabled? What if the code could be viewed and decoded by anyone, not just law enforcement? These hidden tracking codes exist – examine the ethical considerations they pose. Should users be informed of the feature? Should users be able to disable the feature? Develop ethical arguments for both positions.

<Reid> I fixed the grammar error in the section title. The section was titled "Is it bad idea?" instead of "Is it a bad idea?"

CSC 379 SUM2008:Week 4, Group 4

2008-08-06T12:31:54Z

Jroverto: /* Is it bad idea? */

==Printer Tracking Technology==

===How does it work?===

Encoding data in the form a machine-readable printed graph is not a new idea—adhering printed barcodes to physical objects for tracking purposes has been a commercial practice since 1966, becoming truly ubiquitous in the 1980s. [http://en.wikipedia.org/wiki/Barcode#History] Printer tracking codes are a lot like commercial UPC codes, except that they are virtually undetectable by unaided human eyes and data is encoded into a 2-Dimensional array of micro-dots. As an example, the [http://w2.eff.org/Privacy/printers/docucolor/ Xerox DocuColor] series printer encodes printer data into a 15x8 grid of nearly invisible yellowish dots. The grid is repeated across the entire page, so even fragmented documents may later be forensically identified. The data encoded by the printer is simple: the printer's serial number, the date and time at which a document was printed.

Currently, hidden printer tracking technology has been found only in ''some'' laser printers, of which [http://www.eff.org EFF] has compiled a non-comprehensive [http://w2.eff.org/Privacy/printers/list.php list].

===Why Is It Useful?===

Currently, the only official use of the hidden tracking dots by our government is their role in tracking down [http://www.kahl.net/news/2005/10/government-tracks-printer-usage-with.html counterfeiters]. These criminals often employ the technique of scanning legal currency, then by using a color laser printer or color laser copier, they are able to mass-produce the counterfeit money that is of a high enough quality that it will fool most people. By using the [http://www.jconline.com/apps/pbcs.dll/article?AID=/20080713/NEWS09/80713019 hidden tracking codes], law-enforcement officials, specifically the Secret Service, are able to determine the brand and model number of the printer that produced the counterfeit bills as well as finding the specific serial number of the offending machine. They are then able to [http://www.pcworld.com/article/118664/government_uses_color_laser_printer_technology_to_track_documents.html use that information] to contact the manufacturer of the printer to gain purchase information that will allow them to determine who owns that specific device.

Currency counterfeiters are not the only ones affected by this technology. By employing similar criminal techniques, document forgers are using color printers to forge driver's licenses, passports, identification badges, and [http://query.nytimes.com/gst/fullpage.html?res=9C0CE4DC1231F93BA35753C1A966958260&sec=&spon=&pagewanted=all checks]. By analyzing the tracking dots on the paper that the forged documents were printed on, authorities are able to create a paper trail leading to the forgers and expedite their capture.

This practice is not limited the the United States government as the governments of [http://www.pcworld.idg.com.au/index.php/id;1002274598 other countries] concerned with the circulation of counterfeit currency also employ the same techniques used by the Secret Service.

===Is it a bad idea?===

By producing what amounts to a documented signature of the originating machine, the anonymity that comes from a printed document over a digital document is no longer possible due to this technology. There is nothing about this technology that limits its use to only tracking counterfeiters and forgers so the end result is that it is a blatant [http://www.usatoday.com/tech/news/surveillance/2008-07-13-printer_N.htm?loc=interstitialskip violation of the privacy] of the affected person, even when they are not guilty of any crimes. Otherwise innocent people such as [http://www.jconline.com/apps/pbcs.dll/article?AID=/20080713/NEWS09/80713019 political dissidents, whistleblowers, religious activists, or protesters] that certain groups might find threatening can be tracked due to their privacy being compromised by their printers. This seemingly blatant privacy violation is not going unchallenged as groups in the [http://www.eff.org/issues/printers United States] and [http://arstechnica.com/news.ars/post/20080214-eu-commissioner-printer-tracking-may-be-human-rights-violation.html?rel Europe] are pressing their governments to act and defend their rights to privacy. While it's original design was a noble one, the end result is that these document tracking dots remove any sense of privacy for the author of a document and might as well be the signature of that author.

===Links===
*[http://www.pcworld.com/article/118664/government_uses_color_laser_printer_technology_to_track_documents.html Government Uses Color Laser Printer Technology to Track Documents]. Jason Tuohey, Medill News Service. Nov 22, 2004.
* [http://www.usatoday.com/tech/news/surveillance/2008-07-13-printer_N.htm Printer dots raise privacy concerns]. Thomas Frank, ''USA Today''. Jul 13, 2008.
* [http://w2.eff.org/Privacy/printers/docucolor/ EFF's analysis of Xerox DocuColor Printers' hidden printer tracking dots].
* [http://www.eff.org/pages/list-printers-which-do-or-do-not-display-tracking-dots EFF's list of laser printers that do or do not display tracking dots].

Security Precautions

2008-08-05T01:09:32Z

Jroverto: /* Bibliography */ Capitalization formatting for consistency

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.
**For individuals, protecting their computer from the majority of the security concerns that it might face from the Internet is simply a matter of installing a good [http://anti-virus-software-review.toptenreviews.com/ anti-virus program] and a good [http://anti-spyware-review.toptenreviews.com/ anti-spyware program]. Some products even bundle these features together so that a user only needs to concern themselves with installing one protection suite to cover all of the potential threats.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The twenty most critical Internet security vulnerabilities: the experts consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - '''NEW'''
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet firewalls and security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home network security] ''CERT Coordination Center''
*[http://www.addsecure.net/breach.htm Media examples of security breaches] ''ADDSecure.Net, Inc.''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank security breach affected almost 500,000] ''NBC30.com'' - '''NEW'''
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A chronology of data breaches] ''Privacy Rights Clearinghouse/UCAN'' - '''NEW'''
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - '''NEW'''
*[http://www.cert.org/other_sources/viruses.html Computer virus resources] ''Cert.org'' - '''NEW'''
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - '''NEW'''
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure anti-virus] ''f-secure.com'' - '''NEW'''
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - '''NEW'''

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - '''NEW'''
*[http://www.selfseo.com/story-11606.php Renew and update your anti-virus software today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million credit card numbers hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - '''NEW'''
*[http://www.wral.com/golo/blogpost/3217420/ Unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - '''NEW'''
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - '''NEW'''
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What hackers know about your network - that you don't!] Thomas Raef, ''Ezine Articles'' - '''NEW'''
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP firewall] ''Microsoft.com'' - '''NEW'''
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista firewall] ''Microsoft.com'' - '''NEW'''

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the line: ethics for the security professional] ''SecureWorks.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of ethics] ''Sage-au.org.au''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - '''NEW'''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - '''NEW'''
*[http://www.giac.org/overview/ethics.php GIAC code of ethics] ''Global Information Assurance Certification'' - '''NEW'''

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading security awareness for OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t fall victim to Internet fraud] Eric Buck ''SELF SEO''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - '''NEW'''
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime treaty: what it means to you] Larry Downes, ''CIOInsight.com'' - '''NEW'''
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - convention on cybercrime] ''Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s message to the Senate on the council of Europe convention on cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/COEFAQs.htm Cybercrime.gov] ''US Dept of Justice'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime treaty] ''Wikipedia.org'' - '''NEW'''
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar alarm catches hackers on the net] Will Knight, ''ZDNet.co.uk'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - '''NEW'''
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of vulnerability scanners] ''windowhaxor.net'' - '''NEW'''
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT security outsourcing] Jay A Milne, ''NetworkComputing.com'' - '''NEW'''
*[http://www.uscities.net/webnovice/safe_surf.htm A parents guide to safe surfing] Phillip Elam, ''uscities.net'' - '''NEW'''
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - '''NEW'''
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-ten Internet filter software] ''TopTenReviews.com'' - '''NEW'''
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - '''NEW'''

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - '''NEW'''

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

Security Precautions

2008-08-05T01:00:38Z

Jroverto: /* Security Precautions Awareness Is Growing */ added anti-spyware and anti-virus protection recommendation

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.
**For individuals, protecting their computer from the majority of the security concerns that it might face from the Internet is simply a matter of installing a good [http://anti-virus-software-review.toptenreviews.com/ anti-virus program] and a good [http://anti-spyware-review.toptenreviews.com/ anti-spyware program]. Some products even bundle these features together so that a user only needs to concern themselves with installing one protection suite to cover all of the potential threats.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The Twenty Most Critical Internet Security Vulnerabilities: The Experts Consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - '''NEW'''
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet Firewalls and Security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home Network Security] ''CERT Coordination Center''
*[http://www.addsecure.net/breach.htm Media Examples of Security Breaches] ''ADDSecure.Net, Inc.''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank Security Breach Affected Almost 500,000] ''NBC30.com'' - '''NEW'''
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A Chronology of Data Breaches] ''Privacy Rights Clearinghouse/UCAN'' - '''NEW'''
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - '''NEW'''
*[http://www.cert.org/other_sources/viruses.html Computer Virus Resources] ''Cert.org'' - '''NEW'''
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - '''NEW'''
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure Anti-Virus] ''f-secure.com'' - '''NEW'''
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - '''NEW'''

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - '''NEW'''
*[http://www.selfseo.com/story-11606.php Renew and Update Your Antivirus Software Today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million Credit Card Numbers Hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - '''NEW'''
*[http://www.wral.com/golo/blogpost/3217420/ unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - '''NEW'''
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - '''NEW'''
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What Hackers Know About Your Network - That You Don't!] Thomas Raef, ''Ezine Articles'' - '''NEW'''
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP Firewall] ''Microsoft.com'' - '''NEW'''
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista Firewall] ''Microsoft.com'' - '''NEW'''

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the Line: Ethics for the Security Professional] ''SecureWorks.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of Ethics] ''Sage-au.org.au''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - '''NEW'''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - '''NEW'''
*[http://www.giac.org/overview/ethics.php GIAC Code of Ethics] ''Global Information Assurance Certification'' - '''NEW'''

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading Security Awareness For OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t Fall Victim To Internet Fraud] Eric Buck ''SELF SEO''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - '''NEW'''
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime Treaty: What it Means to You] Larry Downes, ''CIOInsight.com'' - '''NEW'''
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - Convention on Cybercrime] ''Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s Message to the Senate on the Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/COEFAQs.htm cybercrime.gov] ''US Dept of Justice'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime Treaty] ''Wikipedia.org'' - '''NEW'''
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar Alarm Catches Hackers on the Net] Will Knight, ''ZDNet.co.uk'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - '''NEW'''
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of Vulnerability Scanners] ''windowhaxor.net'' - '''NEW'''
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT Security Outsourcing] Jay A Milne, ''NetworkComputing.com'' - '''NEW'''
*[http://www.uscities.net/webnovice/safe_surf.htm A Parents Guide to Safe Surfing] Phillip Elam, ''uscities.net'' - '''NEW'''
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - '''NEW'''
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-Ten Internet Filter Software] ''TopTenReviews.com'' - '''NEW'''
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - '''NEW'''

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - '''NEW'''

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

Security Precautions

2008-08-05T00:51:36Z

Jroverto: /* Security Precautions Awareness is Growing */ consolidating links

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The Twenty Most Critical Internet Security Vulnerabilities: The Experts Consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - '''NEW'''
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet Firewalls and Security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home Network Security] ''CERT Coordination Center''
*[http://www.addsecure.net/breach.htm Media Examples of Security Breaches] ''ADDSecure.Net, Inc.''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank Security Breach Affected Almost 500,000] ''NBC30.com'' - '''NEW'''
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A Chronology of Data Breaches] ''Privacy Rights Clearinghouse/UCAN'' - '''NEW'''
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - '''NEW'''
*[http://www.cert.org/other_sources/viruses.html Computer Virus Resources] ''Cert.org'' - '''NEW'''
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - '''NEW'''
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure Anti-Virus] ''f-secure.com'' - '''NEW'''
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - '''NEW'''

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - '''NEW'''
*[http://www.selfseo.com/story-11606.php Renew and Update Your Antivirus Software Today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million Credit Card Numbers Hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - '''NEW'''
*[http://www.wral.com/golo/blogpost/3217420/ unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - '''NEW'''
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - '''NEW'''
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What Hackers Know About Your Network - That You Don't!] Thomas Raef, ''Ezine Articles'' - '''NEW'''
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP Firewall] ''Microsoft.com'' - '''NEW'''
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista Firewall] ''Microsoft.com'' - '''NEW'''

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the Line: Ethics for the Security Professional] ''SecureWorks.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of Ethics] ''Sage-au.org.au''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - '''NEW'''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - '''NEW'''
*[http://www.giac.org/overview/ethics.php GIAC Code of Ethics] ''Global Information Assurance Certification'' - '''NEW'''

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading Security Awareness For OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t Fall Victim To Internet Fraud] Eric Buck ''SELF SEO''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - '''NEW'''
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime Treaty: What it Means to You] Larry Downes, ''CIOInsight.com'' - '''NEW'''
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - Convention on Cybercrime] ''Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s Message to the Senate on the Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/COEFAQs.htm cybercrime.gov] ''US Dept of Justice'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime Treaty] ''Wikipedia.org'' - '''NEW'''
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar Alarm Catches Hackers on the Net] Will Knight, ''ZDNet.co.uk'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - '''NEW'''
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of Vulnerability Scanners] ''windowhaxor.net'' - '''NEW'''
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT Security Outsourcing] Jay A Milne, ''NetworkComputing.com'' - '''NEW'''
*[http://www.uscities.net/webnovice/safe_surf.htm A Parents Guide to Safe Surfing] Phillip Elam, ''uscities.net'' - '''NEW'''
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - '''NEW'''
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-Ten Internet Filter Software] ''TopTenReviews.com'' - '''NEW'''
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - '''NEW'''

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - '''NEW'''

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

Security Precautions

2008-08-05T00:50:05Z

Jroverto: /* Ethical Responsibilities */ consolidating links

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The Twenty Most Critical Internet Security Vulnerabilities: The Experts Consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - '''NEW'''
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet Firewalls and Security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home Network Security] ''CERT Coordination Center''
*[http://www.addsecure.net/breach.htm Media Examples of Security Breaches] ''ADDSecure.Net, Inc.''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank Security Breach Affected Almost 500,000] ''NBC30.com'' - '''NEW'''
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A Chronology of Data Breaches] ''Privacy Rights Clearinghouse/UCAN'' - '''NEW'''
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - '''NEW'''
*[http://www.cert.org/other_sources/viruses.html Computer Virus Resources] ''Cert.org'' - '''NEW'''
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - '''NEW'''
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure Anti-Virus] ''f-secure.com'' - '''NEW'''
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - '''NEW'''

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - '''NEW'''
*[http://www.selfseo.com/story-11606.php Renew and Update Your Antivirus Software Today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million Credit Card Numbers Hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - '''NEW'''
*[http://www.wral.com/golo/blogpost/3217420/ unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - '''NEW'''
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - '''NEW'''
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What Hackers Know About Your Network - That You Don't!] Thomas Raef, ''Ezine Articles'' - '''NEW'''
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP Firewall] ''Microsoft.com'' - '''NEW'''
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista Firewall] ''Microsoft.com'' - '''NEW'''

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the Line: Ethics for the Security Professional] ''SecureWorks.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of Ethics] ''Sage-au.org.au''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - '''NEW'''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - '''NEW'''
*[http://www.giac.org/overview/ethics.php GIAC Code of Ethics] ''Global Information Assurance Certification'' - '''NEW'''

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading Security Awareness For OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t Fall Victim To Internet Fraud] Eric Buck ''SELF SEO''
*[http://www.techweb.com/wire/story/TWB20000303S0013 Outsourced Security on the Rise] Rutrell Yasin ''TechWeb''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - '''NEW'''
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime Treaty: What it Means to You] Larry Downes, ''CIOInsight.com'' - '''NEW'''
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - Convention on Cybercrime] ''Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s Message to the Senate on the Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/COEFAQs.htm cybercrime.gov] ''US Dept of Justice'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime Treaty] ''Wikipedia.org'' - '''NEW'''
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar Alarm Catches Hackers on the Net] Will Knight, ''ZDNet.co.uk'' - '''NEW'''
*[http://technews.acm.org/articles/2000-2/0421f.html#item10 Companies Boosting Security for Web Sites] ''ACM News Service''
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - '''NEW'''
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of Vulnerability Scanners] ''windowhaxor.net'' - '''NEW'''
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT Security Outsourcing] Jay A Milne, ''NetworkComputing.com'' - '''NEW'''
*[http://www.uscities.net/webnovice/safe_surf.htm A Parents Guide to Safe Surfing] Phillip Elam, ''uscities.net'' - '''NEW'''
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - '''NEW'''
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-Ten Internet Filter Software] ''TopTenReviews.com'' - '''NEW'''
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - '''NEW'''

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - '''NEW'''

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

Security Precautions

2008-08-05T00:49:01Z

Jroverto: /* Security Precautions Are Not Easy */ consolidating links

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The Twenty Most Critical Internet Security Vulnerabilities: The Experts Consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - '''NEW'''
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet Firewalls and Security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home Network Security] ''CERT Coordination Center''
*[http://www.addsecure.net/breach.htm Media Examples of Security Breaches] ''ADDSecure.Net, Inc.''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank Security Breach Affected Almost 500,000] ''NBC30.com'' - '''NEW'''
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A Chronology of Data Breaches] ''Privacy Rights Clearinghouse/UCAN'' - '''NEW'''
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - '''NEW'''
*[http://www.cert.org/other_sources/viruses.html Computer Virus Resources] ''Cert.org'' - '''NEW'''
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - '''NEW'''
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure Anti-Virus] ''f-secure.com'' - '''NEW'''
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - '''NEW'''

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - '''NEW'''
*[http://www.selfseo.com/story-11606.php Renew and Update Your Antivirus Software Today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million Credit Card Numbers Hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - '''NEW'''
*[http://www.wral.com/golo/blogpost/3217420/ unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - '''NEW'''
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - '''NEW'''
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What Hackers Know About Your Network - That You Don't!] Thomas Raef, ''Ezine Articles'' - '''NEW'''
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP Firewall] ''Microsoft.com'' - '''NEW'''
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista Firewall] ''Microsoft.com'' - '''NEW'''

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the Line: Ethics for the Security Professional] ''SecureWorks.com''
*[http://www.linuxsecurity.com/content/view/121960/49/ Preventing DDOS Attacks] Blessen Cherian, ''LinuxSecurity.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of Ethics] ''Sage-au.org.au''
*[http://www.uga.edu/compsec/use.html UGA Computer Use Policies] ''UGA.edu''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - '''NEW'''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - '''NEW'''
*[http://www.giac.org/overview/ethics.php GIAC Code of Ethics] ''Global Information Assurance Certification'' - '''NEW'''

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading Security Awareness For OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t Fall Victim To Internet Fraud] Eric Buck ''SELF SEO''
*[http://www.techweb.com/wire/story/TWB20000303S0013 Outsourced Security on the Rise] Rutrell Yasin ''TechWeb''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - '''NEW'''
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime Treaty: What it Means to You] Larry Downes, ''CIOInsight.com'' - '''NEW'''
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - Convention on Cybercrime] ''Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s Message to the Senate on the Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/COEFAQs.htm cybercrime.gov] ''US Dept of Justice'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime Treaty] ''Wikipedia.org'' - '''NEW'''
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar Alarm Catches Hackers on the Net] Will Knight, ''ZDNet.co.uk'' - '''NEW'''
*[http://technews.acm.org/articles/2000-2/0421f.html#item10 Companies Boosting Security for Web Sites] ''ACM News Service''
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - '''NEW'''
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of Vulnerability Scanners] ''windowhaxor.net'' - '''NEW'''
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT Security Outsourcing] Jay A Milne, ''NetworkComputing.com'' - '''NEW'''
*[http://www.uscities.net/webnovice/safe_surf.htm A Parents Guide to Safe Surfing] Phillip Elam, ''uscities.net'' - '''NEW'''
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - '''NEW'''
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-Ten Internet Filter Software] ''TopTenReviews.com'' - '''NEW'''
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - '''NEW'''

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - '''NEW'''

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

Security Precautions

2008-08-05T00:28:43Z

Jroverto: /* Why Are Security Precautions Necessary? */ consolidated the number of links

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The Twenty Most Critical Internet Security Vulnerabilities: The Experts Consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - '''NEW'''
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet Firewalls and Security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home Network Security] ''CERT Coordination Center''
*[http://www.addsecure.net/breach.htm Media Examples of Security Breaches] ''ADDSecure.Net, Inc.''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank Security Breach Affected Almost 500,000] ''NBC30.com'' - '''NEW'''
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A Chronology of Data Breaches] ''Privacy Rights Clearinghouse/UCAN'' - '''NEW'''
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - '''NEW'''
*[http://www.cert.org/other_sources/viruses.html Computer Virus Resources] ''Cert.org'' - '''NEW'''
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - '''NEW'''
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure Anti-Virus] ''f-secure.com'' - '''NEW'''
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - '''NEW'''

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - '''NEW'''
*[http://www.selfseo.com/story-11606.php Renew and Update Your Antivirus Software Today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million Credit Card Numbers Hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - '''NEW'''
*[http://www.wral.com/golo/blogpost/3217420/ unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - '''NEW'''
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - '''NEW'''
*[http://www.informationweek.com/778/security.htm Companies Strive for Simpler Security] Larry Kahaner, ''InformationWeek.com''
*[http://www.schneier.com/essay-037.html Why Cryptography is Harder than it Looks] Bruce Schneier, ''Schneier.com''
*[http://www.networkworld.com/news/2000/1005secstudy.html Hacking Rises Despite Increased Security Spending] Christine M. Campbell, ''IDG News Service''
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - '''NEW'''
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What Hackers Know About Your Network - That You Don't!] Thomas Raef, ''Ezine Articles'' - '''NEW'''
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP Firewall] ''Microsoft.com'' - '''NEW'''
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista Firewall] ''Microsoft.com'' - '''NEW'''

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the Line: Ethics for the Security Professional] ''SecureWorks.com''
*[http://www.linuxsecurity.com/content/view/121960/49/ Preventing DDOS Attacks] Blessen Cherian, ''LinuxSecurity.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of Ethics] ''Sage-au.org.au''
*[http://www.uga.edu/compsec/use.html UGA Computer Use Policies] ''UGA.edu''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - '''NEW'''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - '''NEW'''
*[http://www.giac.org/overview/ethics.php GIAC Code of Ethics] ''Global Information Assurance Certification'' - '''NEW'''

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading Security Awareness For OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t Fall Victim To Internet Fraud] Eric Buck ''SELF SEO''
*[http://www.techweb.com/wire/story/TWB20000303S0013 Outsourced Security on the Rise] Rutrell Yasin ''TechWeb''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - '''NEW'''
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime Treaty: What it Means to You] Larry Downes, ''CIOInsight.com'' - '''NEW'''
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - Convention on Cybercrime] ''Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s Message to the Senate on the Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/COEFAQs.htm cybercrime.gov] ''US Dept of Justice'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime Treaty] ''Wikipedia.org'' - '''NEW'''
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar Alarm Catches Hackers on the Net] Will Knight, ''ZDNet.co.uk'' - '''NEW'''
*[http://technews.acm.org/articles/2000-2/0421f.html#item10 Companies Boosting Security for Web Sites] ''ACM News Service''
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - '''NEW'''
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of Vulnerability Scanners] ''windowhaxor.net'' - '''NEW'''
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT Security Outsourcing] Jay A Milne, ''NetworkComputing.com'' - '''NEW'''
*[http://www.uscities.net/webnovice/safe_surf.htm A Parents Guide to Safe Surfing] Phillip Elam, ''uscities.net'' - '''NEW'''
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - '''NEW'''
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-Ten Internet Filter Software] ''TopTenReviews.com'' - '''NEW'''
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - '''NEW'''

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - '''NEW'''

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

Security Precautions

2008-08-05T00:25:10Z

Jroverto: /* Source Files */ added link to topic description

=Study Guide=
===Why Are Security Precautions Necessary?===

*In today’s technical workplace, almost every piece of computer hardware is connected to the internet. Anything that is connected to the internet is susceptible to outside intruders across the globe.
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm Routinely], many E-Commerce, military, and other government or personal websites experience breaches in security.
*With so much [http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ personal information] taking a digital form, the risks to businesses as well as individuals is great.
*Though the [http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html frequency] of security-related downtime is being reduced, even a day of having a computer system down in a large corporation could mean thousands of dollars lost for that company.
*Unethical computer users [http://technews.acm.org/articles/2000-2/0410m.html#item10 take advantage of security leaks] to steal consumer information ranging from passwords to [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html credit card numbers].
*[http://www.cert.org/other_sources/viruses.html Computer viruses] and other forms of "malware" can also be harmful to a computer system connected to the internet. Files downloaded onto a computer could contain viruses that destroy data or cause other security problems.
*Security precautions, if followed correctly, can protect individual users, companies, and government agencies from a malicious computer hacker or computer virus.
*Applications in [http://www.sans.org/top20/ Unix systems], [http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Macs], and even [http://www.f-secure.com/weblog/archives/00000575.html mobile devices] are also at risk. Security problems are no longer problems only for Windows users.
**Even using common software such as [http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ iTunes, WinZip, Java, and OpenOffice] can open a computer to security holes if the software is not properly updated and secure.

===Security Precautions Are Not Easy===

*Companies are getting better at securing their computer systems, but they still have a [http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ long way to go].
**The [http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html impact of a security attack] is greater now than it ever was.
*Threats can even come from [http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html within a business].
*System administrators have difficulty keeping up with the large amount of knowledge needed to reduce the risk of compromise.
*The complexity of computer systems makes finding every single hole in security nearly impossible to find. Crackers are continually searching for these, so computer administrators must be as well to keep up. This has also led to the desire of more simple computing to help lower the risk of holes occurring.
*The most important precaution an individual user can take is to [http://www.selfseo.com/story-11606.php renew and update antivirus software]. This is more efficiently done if the software automatically updates itself.
**For those with broadband Internet access, this is an [http://www.wral.com/golo/blogpost/3217420/ absolute necessity] since the computer is maintaining a constant connection to the Internet.
**Additionally, broadband users should ensure that their [http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx firewall] is updated properly and active.
*Distributed [http://en.wikipedia.org/wiki/Denial-of-service_attack Denial of Service attacks] allow a cracker to shut down a site trivially.
**Tracking down the source of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack is very difficult.
**Also, detecting an attack and filtering it off is just as difficult.
*Hackers employ tools that constantly [http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 scan the Internet] for unprotected computers so a computer must be protected before it ever connects to the Internet.

===Ethical Responsibilities===

*It is very difficult and time consuming to determine what actions are attacks on a computer system and what actions are not. This causes system and network administrators to [http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic ignore warning signs and policies] that could have prevented a security attack.
*Why should a system administrator be concerned?
**Information security professionals are the [http://www.giac.org/overview/ethics.php first line of defense] for the safety of their company's data.
**Compromised security could lead to a leakage of sensitive information such as passwords, credit card numbers, or other personal information.
**Even worse, a compromised computer could be used as part of a [http://www.linuxsecurity.com/content/view/121960/49/ Distributed Denial of Service] attack against another machine or network.
*This leads to an ethical dilemma for the system administrator:
**The system administrator could follow up on all actions on their network that seem suspicious. However, this would take lots of time, resources, and money to do.
**On the other hand, the system administrator could ignore all but the most suspicious ones. This method would result in more security attacks passing through the network undetected.

===Security Precautions Awareness Is Growing===

*The fact that the internet is more vulnerable now than ever has led many companies and individuals to increase their security precautions.
*A [http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ wide variety] of [http://en.wikipedia.org/wiki/Vulnerability_scanner computer programs] have become available to companies over the past few years that analyze computer systems and networks looking for any potential vulnerabilities. These computer programs help companies to fend off attacks on their networks.
*Another option is for a company to hire security consultants to handle network security for them. Many IT managers are having trouble managing information security internally and by [http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 outsourcing security] responsibilities they are free to focus their manpower on other projects.
*Recently, the United States joined over a dozen other countries in supporting the [http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe Convention on Cybercrime]. The existence of this convention further shows that people around the world are becoming aware of the growing threats to their security throughout cyberspace.
*Users are becoming more aware of security issues and are becoming more informed on safe surfing habits.
**Parents are becoming aware of the dangers that face their children on the Internet and as a result, a [http://www.internet-filter-review.toptenreviews.com/ wide array of products] are available to help them maintain a level of security for their children online.

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy] – This program scans your computer for known adware and other system invaders. If a possible threat is detected, it is compared to a database of known threats to determine if it is really malicious.
*[http://www.lavasoft.com/ Ad-Aware] – This program has the ability to scan your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components, Ad-Aware SE easily can clean your system, allowing you to maintain a higher degree of privacy while you surf the Web.
*[http://www.pandasecurity.com/usa/ Panda TruPrevent] – Panda TruPrevent detects and blocks unknown viruses, the ones that normal antivirus programs are incapable of detecting because they are still not updated against them. TruPrevent does not replace your present antivirus, but rather it reinforces it, offering you extra protection.
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm] - ZoneAlarm Security Suite is the easy-to-use, comprehensive security solution that is based on the world's best firewall to keep out hackers, viruses, worms, and other threats. It combines popular firewall with antivirus protection, Web site filtering, privacy protection, and instant-messaging security.
*[http://anti-virus-software-review.toptenreviews.com/ Anti-virus software] - When updated automatically, the virus definitions in most anti-virus suites will protect computers from the various types of malware that could potentially target them.

=Bibliography=
===Why Are Security Precautions Necessary?===

*[http://www.sans.org/top20/ The Twenty Most Critical Internet Security Vulnerabilities: The Experts Consensus] Rohit Dhamankar, ''SANS Computer Security Training''
*[http://money.cnn.com/2005/05/23/news/fortune500/bank_info/ Bank security breach may be biggest yet] ''CnnMoney.com'' - '''NEW'''
*[http://www.linuxsecurity.com/resource_files/firewalls/nsc/500619.html Internet Firewalls and Security] Chuck Semeria, ''3Com Corporation''
*[http://www.cert.org/tech_tips/home_networks.html Home Network Security] ''CERT Coordination Center''
*[http://technews.acm.org/articles/2001-3/0323f.html#item1 NSC Chief Urges U.S. Tech Firms to Protect Computer Networks] ''ACM News Service''
*[http://www.addsecure.net/breach.htm Media Examples of Security Breaches] ''ADDSecure.Net, Inc.''
*[http://www.iwar.org.uk/comsec/resources/canada-ia/infosecawareness.htm Information Security: Raising Awareness] Bruce Hunter, ''iwar.org.uk''
*[http://technews.acm.org/articles/2000-2/0211f.html#item2 Redesigning the Internet: Can it Be Made Less Vulnerable?] ''ACM News Service''
*[http://technews.acm.org/articles/2000-2/0410m.html#item10 Hacking Away] ''ACM News Service''
*[http://www.networkcomputing.com/1105/1105f24.html Is Security the Next Big Thing?] Greg Shipley, ''Network Computing''
*[http://news.cnet.com/2100-1017-250390.html Online Stores Try to Bar the Doors] Greg Sandoval, ''CNET''
*[http://www.nbc30.com/money/16438742/detail.html?rss=har&psp=news AG:Bank Security Breach Affected Almost 500,000] ''NBC30.com'' - '''NEW'''
*[http://www.privacyrights.org/ar/ChronDataBreaches.htm A Chronology of Data Breaches] ''Privacy Rights Clearinghouse/UCAN'' - '''NEW'''
*[http://news.cnet.com/Money-lost-to-cybercrime-down--again/2100-7349_3-6083860.html Money lost to cybercrime down--again] Joris Evers, ''Cnet News'' - '''NEW'''
*[http://www.cert.org/other_sources/viruses.html Computer Virus Resources] ''Cert.org'' - '''NEW'''
*[http://www.cnet.com.au/software/security/0,239029558,339285176,00.htm Mac users targeted by fake antivirus tool] Liam Tung, ''cnet.com.au'' - '''NEW'''
*[http://www.f-secure.com/weblog/archives/00000575.html New Symbian malware pretending to be F-Secure Anti-Virus] ''f-secure.com'' - '''NEW'''
*[http://www.theregister.co.uk/2008/07/28/pwning_security_updates/ Evilgrade] Dan Goodin, ''The Register'' - '''NEW'''

===Security Precautions Are Not Easy===

*[http://www.theregister.co.uk/2008/07/25/bank_sites_insecure/ 75% of US bank websites have flaws] Dan Goodin, ''The Register'' - '''NEW'''
*[http://www.selfseo.com/story-11606.php Renew and Update Your Antivirus Software Today] Kwan Lo, ''SELF SEO''
*[http://www.washingtonpost.com/wp-dyn/content/article/2005/06/17/AR2005061701031.html 40 Million Credit Card Numbers Hacked] Jonathan Krim and Michael Barbaro, ''washingtonpost.com'' - '''NEW'''
*[http://www.wral.com/golo/blogpost/3217420/ unprotected pc on twc road runner lasts an average of 4m12s until it is hacked] Charles Boyer, ''WRAL.com'' - '''NEW'''
*[http://www.computerworld.com/securitytopics/security/cybercrime/story/0,10801,101903,00.html Bank employees used computer screen captures to snag customer data] Todd R. Weiss, ''computerworld.com'' - '''NEW'''
*[http://www.informationweek.com/778/security.htm Companies Strive for Simpler Security] Larry Kahaner, ''InformationWeek.com''
*[http://www.schneier.com/essay-037.html Why Cryptography is Harder than it Looks] Bruce Schneier, ''Schneier.com''
*[http://www.networkworld.com/news/2000/1005secstudy.html Hacking Rises Despite Increased Security Spending] Christine M. Campbell, ''IDG News Service''
*[http://en.wikipedia.org/wiki/Denial-of-service_attack DoS attack] ''wikipedia.org'' - '''NEW'''
*[http://ezinearticles.com/?What-Hackers-Know-About-Your-Network---That-You-Dont!&id=675497 What Hackers Know About Your Network - That You Don't!] Thomas Raef, ''Ezine Articles'' - '''NEW'''
*[http://www.microsoft.com/windowsxp/using/networking/security/winfirewall.mspx Using Windows XP Firewall] ''Microsoft.com'' - '''NEW'''
*[http://www.microsoft.com/windows/windows-vista/features/firewall.aspx Windows Vista Firewall] ''Microsoft.com'' - '''NEW'''

===Ethical Responsibilities===

*[http://www.secureworks.com/research/articles/ethics/ Crossing the Line: Ethics for the Security Professional] ''SecureWorks.com''
*[http://www.linuxsecurity.com/content/view/121960/49/ Preventing DDOS Attacks] Blessen Cherian, ''LinuxSecurity.com''
*[http://www.sage-au.org.au/display/SAGEAU/Code+of+Ethics;jsessionid=1B552880BBF44221BEA4A8FE1A8FDD35 SAGE-AU: Code of Ethics] ''Sage-au.org.au''
*[http://www.uga.edu/compsec/use.html UGA Computer Use Policies] ''UGA.edu''
*[http://www.zdnetasia.com/techguide/disasterrecovery/0,39044895,61952139,00.htm 10 dumb things IT pros do that can mess up their networks] Deb Shinder, ''ZDnet Asia'' - '''NEW'''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=14&articleId=9051483&intsrc=hm_topic Even IT types disregard policies designed to protect corporate data] Jaikumar Vijayan, ''ComputerWorld.com'' - '''NEW'''
*[http://www.giac.org/overview/ethics.php GIAC Code of Ethics] ''Global Information Assurance Certification'' - '''NEW'''

===Security Precautions Awareness is Growing===

*[http://www.securityfocus.com/columnists/389 Spreading Security Awareness For OS X] Robert Lemos ''Security Focus''
*[http://www.selfseo.com/story-11607.php Don’t Fall Victim To Internet Fraud] Eric Buck ''SELF SEO''
*[http://www.techweb.com/wire/story/TWB20000303S0013 Outsourced Security on the Rise] Rutrell Yasin ''TechWeb''
*[http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9002214 Senate approves cybercrime treaty] Grant Gross, ''ComputerWorld.com'' - '''NEW'''
*[http://www.cioinsight.com/c/a/Past-News/Cybercrime-Treaty-What-it-Means-to-You/ Cybercrime Treaty: What it Means to You] Larry Downes, ''CIOInsight.com'' - '''NEW'''
*[http://conventions.coe.int/Treaty/EN/Treaties/Html/185.htm Council of Europe - ETS No. 185 - Convention on Cybercrime] ''Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/senateCoe.pdf senateCoe.pdf] ''President’s Message to the Senate on the Council of Europe Convention on Cybercrime'' - '''NEW'''
*[http://www.cybercrime.gov/COEFAQs.htm cybercrime.gov] ''US Dept of Justice'' - '''NEW'''
*[http://en.wikipedia.org/wiki/Cybercrime_Treaty Cybercrime Treaty] ''Wikipedia.org'' - '''NEW'''
*[http://news.zdnet.co.uk/communications/0,1000000085,2079244,00.htm Burglar Alarm Catches Hackers on the Net] Will Knight, ''ZDNet.co.uk'' - '''NEW'''
*[http://technews.acm.org/articles/2000-2/0421f.html#item10 Companies Boosting Security for Web Sites] ''ACM News Service''
*[http://en.wikipedia.org/wiki/Vulnerability_scanner Vulnerability scanner] ''Wikipedia.org'' - '''NEW'''
*[http://www.windowhaxor.net/2007/09/25/list-of-vulnerability-scanners/ List of Vulnerability Scanners] ''windowhaxor.net'' - '''NEW'''
*[http://www.networkcomputing.com/showArticle.jhtml?articleID=171203188 IT Security Outsourcing] Jay A Milne, ''NetworkComputing.com'' - '''NEW'''
*[http://www.uscities.net/webnovice/safe_surf.htm A Parents Guide to Safe Surfing] Phillip Elam, ''uscities.net'' - '''NEW'''
*[http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci1011476,00.html Security outsourcing widespread by 2010] Bill Brenner, ''SearchSecurity.com'' - '''NEW'''
*[http://www.internet-filter-review.toptenreviews.com/ 2008 Top-Ten Internet Filter Software] ''TopTenReviews.com'' - '''NEW'''
*[http://www.getsafeonline.org/nqcontent.cfm?a_id=1179 Get Safe Online: 10-minute guide for beginners] ''GetSafeOnline.org'' - '''NEW'''

===Some Security Products That Could Help You===

*[http://www.spybot.com/en/index.html Spybot Search & Destroy]
*[http://www.lavasoft.com/ Ad-Aware]
*[http://www.pandasecurity.com/usa/ Panda TruPrevent]
*[http://www.zonealarm.com/store/content/home.jsp Zone Alarm]
*[http://anti-virus-software-review.toptenreviews.com/ Top Ten Anti-Virus Software Suites] - '''NEW'''

==Source Files==
'''Title: Security Precautions'''
* [http://ethics.csc.ncsu.edu/risks/security/precautions/study.php '''Original Study Guide''']
* [http://ethics.csc.ncsu.edu/risks/security/precautions/ '''Original Bibliography''']
* [http://pg-server.csc.ncsu.edu/mediawiki/index.php/CSC_379_SUM2008:Topics#Security_Precautions '''Topic Description''']

Talk:CSC 379 SUM2008:Week 4, Group 4

2008-08-02T02:58:38Z

Jroverto:

CSC 379 SUM2008:Week 4, Group 4

2008-08-02T02:57:07Z

Jroverto: /* Is it bad idea? */

What if every page you print from a color printer were labeled with a hidden code, detailing the printer the page was printed from, the date of printing and the time of printing, down to the minute? What if this feature was intentionally hidden from the user and could not be disabled? What if the code could be viewed and decoded by anyone, not just law enforcement? These hidden tracking codes exist – examine the ethical considerations they pose. Should users be informed of the feature? Should users be able to disable the feature? Develop ethical arguments for both positions.

==Printer Tracking Technology==

===How does it work?===

Encoding data in the form a machine-readable printed graph is not a new idea—adhering printed barcodes to physical objects for tracking purposes has been a commercial practice since 1966, becoming truly ubiquitous in the 1980s. [http://en.wikipedia.org/wiki/Barcode#History] Printer tracking codes are a lot like commercial UPC codes, except that they are virtually undetectable by unaided human eyes and data is encoded into a 2-Dimensional array of micro-dots. As an example, the [http://w2.eff.org/Privacy/printers/docucolor/ Xerox DocuColor] series printer encodes printer data into a 15x8 grid of nearly invisible yellowish dots. The grid is repeated across the entire page, so even fragmented documents may later be forensically identified. The data encoded by the printer is simple: the printer's serial number, the date and time at which a document was printed.

Currently, hidden printer tracking technology has been found only in ''some'' laser printers, of which [http://www.eff.org EFF] has compiled a non-comprehensive [http://w2.eff.org/Privacy/printers/list.php list].

===Why Is It Useful?===

Currently, the only official use of the hidden tracking dots by our government is their role in tracking down [http://www.kahl.net/news/2005/10/government-tracks-printer-usage-with.html counterfeiters]. These criminals often employ the technique of scanning legal currency, then by using a color laser printer or color laser copier, they are able to mass-produce the counterfeit money that is of a high enough quality that it will fool most people. By using the [http://www.jconline.com/apps/pbcs.dll/article?AID=/20080713/NEWS09/80713019 hidden tracking codes], law-enforcement officials, specifically the Secret Service, are able to determine the brand and model number of the printer that produced the counterfeit bills as well as finding the specific serial number of the offending machine. They are then able to [http://www.pcworld.com/article/118664/government_uses_color_laser_printer_technology_to_track_documents.html use that information] to contact the manufacturer of the printer to gain purchase information that will allow them to determine who owns that specific device.

Currency counterfeiters are not the only ones affected by this technology. By employing similar criminal techniques, document forgers are using color printers to forge driver's licenses, passports, identification badges, and [http://query.nytimes.com/gst/fullpage.html?res=9C0CE4DC1231F93BA35753C1A966958260&sec=&spon=&pagewanted=all checks]. By analyzing the tracking dots on the paper that the forged documents were printed on, authorities are able to create a paper trail leading to the forgers and expedite their capture.

This practice is not limited the the United States government as the governments of [http://www.pcworld.idg.com.au/index.php/id;1002274598 other countries] concerned with the circulation of counterfeit currency also employ the same techniques used by the Secret Service.

===Is it bad idea?===

By producing what amounts to a documented signature of the originating machine, the anonymity that comes from a printed document over a digital document is no longer possible due to this technology. There is nothing about this technology that limits its use to only tracking counterfeiters and forgers so the end result is that it is a blatant [http://www.usatoday.com/tech/news/surveillance/2008-07-13-printer_N.htm?loc=interstitialskip violation of the privacy] of the affected person, even when they are not guilty of any crimes. Otherwise innocent people such as [http://www.jconline.com/apps/pbcs.dll/article?AID=/20080713/NEWS09/80713019 political dissidents, whistleblowers, religious activists, or protesters] that certain groups might find threatening can be tracked due to their privacy being compromised by their printers. This seemingly blatant privacy violation is not going unchallenged as groups in the [http://www.eff.org/issues/printers United States] and [http://arstechnica.com/news.ars/post/20080214-eu-commissioner-printer-tracking-may-be-human-rights-violation.html?rel Europe] are pressing their governments to act and defend their rights to privacy. While it's original design was a noble one, the end result is that these document tracking dots remove any sense of privacy for the author of a document and might as well be the signature of that author.

===Links===
* http://www.usatoday.com/tech/news/surveillance/2008-07-13-printer_N.htm
* http://w2.eff.org/Privacy/printers/docucolor/
* http://www.eff.org/pages/list-printers-which-do-or-do-not-display-tracking-dots

CSC 379 SUM2008:Week 4, Group 4

2008-08-02T02:29:18Z

Jroverto: /* Is it bad idea? */

What if every page you print from a color printer were labeled with a hidden code, detailing the printer the page was printed from, the date of printing and the time of printing, down to the minute? What if this feature was intentionally hidden from the user and could not be disabled? What if the code could be viewed and decoded by anyone, not just law enforcement? These hidden tracking codes exist – examine the ethical considerations they pose. Should users be informed of the feature? Should users be able to disable the feature? Develop ethical arguments for both positions.

==Printer Tracking Technology==

===How does it work?===

Encoding data in the form a machine-readable printed graph is not a new idea—adhering printed barcodes to physical objects for tracking purposes has been a commercial practice since 1966, becoming truly ubiquitous in the 1980s. [http://en.wikipedia.org/wiki/Barcode#History] Printer tracking codes are a lot like commercial UPC codes, except that they are virtually undetectable by unaided human eyes and data is encoded into a 2-Dimensional array of micro-dots. As an example, the [http://w2.eff.org/Privacy/printers/docucolor/ Xerox DocuColor] series printer encodes printer data into a 15x8 grid of nearly invisible yellowish dots. The grid is repeated across the entire page, so even fragmented documents may later be forensically identified. The data encoded by the printer is simple: the printer's serial number, the date and time at which a document was printed.

Currently, hidden printer tracking technology has been found only in ''some'' laser printers, of which [http://www.eff.org EFF] has compiled a non-comprehensive [http://w2.eff.org/Privacy/printers/list.php list].

===Why Is It Useful?===

Currently, the only official use of the hidden tracking dots by our government is their role in tracking down [http://www.kahl.net/news/2005/10/government-tracks-printer-usage-with.html counterfeiters]. These criminals often employ the technique of scanning legal currency, then by using a color laser printer or color laser copier, they are able to mass-produce the counterfeit money that is of a high enough quality that it will fool most people. By using the [http://www.jconline.com/apps/pbcs.dll/article?AID=/20080713/NEWS09/80713019 hidden tracking codes], law-enforcement officials, specifically the Secret Service, are able to determine the brand and model number of the printer that produced the counterfeit bills as well as finding the specific serial number of the offending machine. They are then able to [http://www.pcworld.com/article/118664/government_uses_color_laser_printer_technology_to_track_documents.html use that information] to contact the manufacturer of the printer to gain purchase information that will allow them to determine who owns that specific device.

Currency counterfeiters are not the only ones affected by this technology. By employing similar criminal techniques, document forgers are using color printers to forge driver's licenses, passports, identification badges, and [http://query.nytimes.com/gst/fullpage.html?res=9C0CE4DC1231F93BA35753C1A966958260&sec=&spon=&pagewanted=all checks]. By analyzing the tracking dots on the paper that the forged documents were printed on, authorities are able to create a paper trail leading to the forgers and expedite their capture.

This practice is not limited the the United States government as the governments of [http://www.pcworld.idg.com.au/index.php/id;1002274598 other countries] concerned with the circulation of counterfeit currency also employ the same techniques used by the Secret Service.

===Is it bad idea?===

===Links===
* http://www.usatoday.com/tech/news/surveillance/2008-07-13-printer_N.htm
* http://w2.eff.org/Privacy/printers/docucolor/
* http://www.eff.org/pages/list-printers-which-do-or-do-not-display-tracking-dots

CSC 379 SUM2008:Week 4, Group 4

2008-08-02T02:18:03Z