CS205 Highlighted Handouts

Topic No 1: What is Information Security?

Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

IT Security is information security applied to technology

Information security also covers physical security, human resource security, legal & compliance, organizational, and process related aspects

IT Security functions:

− Network security

− Systems security

− Application & database security

InfoSec functions:

− Policies & procedures

What is Cyber Security?

− Precautions taken to guard against unauthorized access to data (in electronic form) or information systems connected to the internet

− Prevention of crime related to the internet

− Confidentiality: keeping information secret

− Integrity: keeping information in its original form

− Availability: keeping information and information systems available for use

Topic No 02: Why Is Information Security Needed?

Bangladesh Bank SWIFT Hack – Feb 2016: Hackers used SWIFT credentials of Bangladesh Central Bank employees to send more than three dozen fraudulent money transfer requests.

− Requests sent to the Federal Reserve Bank of New York asking the bank to transfer millions of the Bangladesh Bank’s funds to bank accounts in the Philippines, Sri Lanka and other parts of Asia.

− USD 81 million stolen

− Total impact could have been USD 1 billion

The Importance Of Information

• IT is pervasive in our society & critical to the Ops & Mngmt of all organizations NHS

NHS cyberattack is 'biggest

ransomware outbreak in history

The NHS hack using Wanna Decryptor ransomware has shut down IT systems with 75,000 attacks in 99 countries

Ransomware attack hits 99 countries · with UK hospitals among targets - live · updates

Screenshot of the suspected ransomware message on a GP's computer in the Greater Preston area CREDIT:PA

• IT is an enabler for business and govt
• Personal information is vital for individuals to function in society
• Information holds value

Topic No 03: Who Is Information Security For?

Personal:

• Social media passwords and safe usage
• Online banking and email account passwords
• Home PC/laptop security
• Board and executive leadership (management commitment)
• CISO (responsible to drive security program)
• IT staff and business users (following information security policies & procedures)

Govt and national:

• Legal and policy making As per PWC Global Economic Crime Report 2016, Cyber

Crime was amongst the top 3 most commonly reported types of economic crime

IMPORTANCE OF INFORMATION SECURITY

Top 3 most commonly reported types of economic crime in 2016

Asset misappropriation Cybercrime Bribery & corruption

pwc

As per Europol 2013 report, Cyber Crime is

now more profitable than the drug trade EURCPDL IAs reported by the 2013 Europol Serious A Organized Threat Assessment, the " Total IGlobal Impact of CyberOime [has risen to] US S3 Tnllion making it more profitable than Ithe global trade inmaniuana. cocaine andheroin combined' X JMI DDLIDOn cu acRioua AND OROANIICO CRIME THREAT ASSESSMENT IIOCTA 20131