CS205 Official Handouts

Module: 2

What is information Security?

Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

IT Security is information security applied to technology.

Information security also covers physical security, human resource security, legal & compliance, organizational, and process related aspects.

IT Security functions:

Network security Systems security Application & database security

InfoSec functions:

Governance

Risk management Performance reviews

What is Cyber Security?

Precautions taken to guard against unauthorized access to data (in electronic form) or information systems connected to the internet

Prevention of crime related to the internet

Three Pillars of Information Security:

Confidentiality: keeping information secret Integrity: keeping information in its original form Availability: keeping information and information systems available for use

Module:3

Why is information security needed?

Bangladesh Bank SWIFT Hack – Feb 2016: Hackers used SWIFT credentials of Bangladesh Central Bank employees to send more than three dozen fraudulent money transfer requests.

Requests sent to the Federal Reserve Bank of New York asking the bank to transfer millions of the Bangladesh Bank’s funds to bank accounts in the Philippines, Sri Lanka and other parts of Asia. USD 81 million stolen Total impact could have been USD 1 billion

Recent Cyber Attack – May 2017 REF: TELEGRAPH

REF: GUARDIAN

The Importance of Information

IT is pervasive in our society & critical to the Ops & Mngmt of all organizations IT is an enabler for business and govt Personal information is vital for individuals to function in society