ICDL

PROFILE
Presented by : Shajid C

MODULE - 12

IT SECURITY

SECURITY CONCEPTS
International Computer Driving License Module 12

Data Threats

Distinguish between data and information.

Understand the term cybercrime.
Understand the difference between hacking,
cracking and ethical hacking.
Recognise threats to data from force majeure
like: fire, floods, war, earthquake.
Recognise threats to data from: employees,
service providers and external individuals.

International Computer Driving License Module 12

ExecuTrain of Qatar

Distinguish between data and information

Data is raw, unorganized facts that need to be
processed. Data can be something simple and
seemingly random and useless until it is
organized.
When data is processed, organized, structured or
presented in a given context so as to make it
useful, it is called information.

International Computer Driving License Module 5

ExecuTrain of Qatar

Cybercrime

Identity Theft
Phishing
Hacking
Downloading illegal music or videos.
Electronic Vandalism, terrorism and extortion.
Illegal interception of communications.
Inappropriate and other offensive material
Electronic money laundering.

International Computer Driving License Module 12

ExecuTrain of Qatar

Hacking / Cracking/ Ethical Hacking

International Computer Driving License Module 12

ExecuTrain of Qatar

Threats to data from force majeure

Force Majeure relates to unforeseen events beyond
the control of the company.
Fire
Floods
War
Earthquake.

International Computer Driving License Module 12

ExecuTrain of Qatar

Other threats to data

Employees
Service providers
External individuals

International Computer Driving License Module 12

ExecuTrain of Qatar

Value of Information
Reasons for protecting personal
information like:

Avoiding identity theft

Name, Credit Card Number, Address, DOB, etc.

Fraud

Borrow money
Obtain Services

International Computer Driving License Module 12

ExecuTrain of Qatar

Value of Information

cont..

Reasons for protecting commercially sensitive

information like:
Preventing theft or misuse of :

Client details
Financial information

International Computer Driving License Module 12

ExecuTrain of Qatar

Value of Information

cont..

Identify measures for preventing unauthorised

access to data like:

Encryption

Digital ID (Private Key)

Certificate (Public Key)

Passwords

International Computer Driving License Module 12

ExecuTrain of Qatar

Value of Information

cont..

Basic characteristics of information security like:

Confidentiality
Integrity
Availability

International Computer Driving License Module 12

ExecuTrain of Qatar

Value of Information

cont..

Identify the main data/privacy protection, retention

and control requirements in your country.
Data Protection Act.
1995 European Data Protection Directive

To Protect the rights of the Data Subject

To set out the responsibilities of the data controller

International Computer Driving License Module 12

ExecuTrain of Qatar

Value of Information

cont..

Rights of the Data Subject:

Fairly and lawfully processed
Processed for limited purposes
Adequate, relevant and not excessive
Accurate
Not kept longer than necessary
Processed in accordance with the data subject rights
Secure
Not transferred to countries without adequate data
protection

International Computer Driving License Module 12

ExecuTrain of Qatar

Value of Information

cont..

Importance of creating and adhering to guidelines

and policies for ICT use.
Firewall
Automatic Updates
Anti virus
Anti-spyware
Passwords
Internet Security
Install and Uninstall Devices or Software's.

International Computer Driving License Module 12

ExecuTrain of Qatar

Personal Security
Social engineering

Information gathering.
Fraud.
Computer system access.

International Computer Driving License Module 12

ExecuTrain of Qatar

Methods Of Social Engineering

Phone Calls
Phishing
Shoulder Surfing

International Computer Driving License Module 12

ExecuTrain of Qatar

Identity theft and its implications

Personal
Financial
Business
Legal

International Computer Driving License Module 12

ExecuTrain of Qatar

Methods of identity theft

Information Diving
Skimming
Pretexting

International Computer Driving License Module 12

ExecuTrain of Qatar

File Security
Understand the effect of enabling/ disabling
macro security settings.
Set a password for files like:

Documents
Compressed files
Spreadsheets

International Computer Driving License Module 12

ExecuTrain of Qatar

Encryption

Advantages Of Encryption
Limitations Of Encryption

International Computer Driving License Module 12

ExecuTrain of Qatar

MALWARE
International Computer Driving License Module 12

ExecuTrain of Qatar

Malware

Trojans
Rootkits
Backdoors

International Computer Driving License

Infectious Malware

Viruses
Worms

International Computer Driving License Module 12

ExecuTrain of Qatar

Malwares
Types of data theft, profit generating/extortion
malwares :

Adware
Spyware
Botnets
Keystroke Logging
Diallers

International Computer Driving License Module 12

ExecuTrain of Qatar

Anti-virus software
Anti-Virus
Limitations of Anti-Virus
Virus Scan

Specific drives
Folders
Files using
Schedule scans

International Computer Driving License Module 12

ExecuTrain of Qatar

Anti-virus software

Quarantine : Effect of quarantining

infected/suspicious files.

International Computer Driving License Module 12

ExecuTrain of Qatar

Anti-virus software - Installation

Importance of :

Downloading and installing software updates

Anti-virus definition files

International Computer Driving License Module 12

ExecuTrain of Qatar

NETWORK SECURITY
International Computer Driving License Module 12

ExecuTrain of Qatar

Networks
Network types:

Local area network (LAN)

Wide area network (WAN)
Virtual private network (VPN)

International Computer Driving License

Role of the network administrator

Managing the:
Authentication
Authorisation
Accounting

International Computer Driving License Module 12

ExecuTrain of Qatar

Firewall

Functions
Limitations

International Computer Driving License Module 12

ExecuTrain of Qatar

Network Connections

Cables
Wireless

International Computer Driving License Module 12

ExecuTrain of Qatar

Network Security Implications

Malware
Unauthorised data access
Maintaining Privacy

International Computer Driving License Module 12

ExecuTrain of Qatar

Wireless Security
Password for Wireless network.
Wired Equivalent Privacy (WEP)

Encryption using Network Security key.

Wi-Fi Protected Access (WPA)

Media Access Control (MAC)

International Computer Driving License Module 12

ExecuTrain of Qatar

Unprotected Network - Security issues

Visibility to other users

International Computer Driving License Module 12

ExecuTrain of Qatar

Connect to a Wi-Fi network

International Computer Driving License Module 12

ExecuTrain of Qatar

Access Control
Network Account

Login
Username and Password

Password Policies

Easy to remember difficult to guess

Minimum Eight Characters
Mix of Numbers letters symbols
Case sensitive

International Computer Driving License Module 12

ExecuTrain of Qatar

Biometric Security

Fingerprint Scanning
Facial Recognition
Voice Recognition
Eye Scanning

International Computer Driving License Module 12

ExecuTrain of Qatar

SECURE WEB USE

International Computer Driving License Module 12

ExecuTrain of Qatar

Web Browsing
Be aware that certain online activity (purchasing,
financial transactions) should only be undertaken
on secure web pages.
Identify a secure website like:

https
lock symbol

International Computer Driving License Module 12

ExecuTrain of Qatar

Pharming

Pharming is a cyber attack intended to redirect a

website's traffic to another, fake site.
Pharming can be conducted either by changing
the hosts file on a victim's computer or by
exploitation of a vulnerability in DNS server
software

International Computer Driving License Module 12

ExecuTrain of Qatar

Digital Certificate

In cryptography, a public key certificate (also

known as a digital certificate or identity
certificate) is an electronic document used to
prove ownership of a public key.
Secure Socket Layer (SSL)
Transport Layer Security (TSL)

International Computer Driving License Module 12

ExecuTrain of Qatar

SSL

International Computer Driving License Module 12

ExecuTrain of Qatar

One Time Password - OTP

A one-time password is a password that is valid

for only one login session or transaction, on a
computer system or other digital device.

International Computer Driving License Module 12

ExecuTrain of Qatar

Browser Settings

Autocomplete
Cookie
Delete Private Data

International Computer Driving License Module 12

ExecuTrain of Qatar

Content Control

Internet filtering software,

Parental control software.

International Computer Driving License Module 12

ExecuTrain of Qatar

Social Networking

Understand the importance of not disclosing

confidential information on social networking
sites

International Computer Driving License Module 12

ExecuTrain of Qatar

Social Networking

Cont..

Be aware of the need to apply appropriate social

networking account privacy settings.
Understand potential dangers when using social
networking sites like:

Cyber Bullying
Grooming
Misleading/Dangerous Information
False Identities
Fraudulent Links Or Messages.

International Computer Driving License Module 12

ExecuTrain of Qatar

COMMUNICATIONS
International Computer Driving License Module 12

ExecuTrain of Qatar

Encrypting, Decrypting An Email

Understand the purpose of encrypting, decrypting

an email.
Understand the term digital signature.
Create and add a digital signature.

International Computer Driving License Module 12

ExecuTrain of Qatar

eMail Security

Be aware of the possibility of receiving fraudulent

and unsolicited e-mail
Understand the term phishing. Identify common
characteristics of phishing like: using names of
legitimate companies, people, false web links.
Be aware of the danger of infecting the computer
with malware by opening an e-mail attachment
that contains a macro or an executable file.

International Computer Driving License Module 12

ExecuTrain of Qatar

Instant Messaging

Understand the term instant messaging (IM) and

its uses
Understand the security vulnerabilities of IM like:
malware, backdoor access, access to files.
Recognise methods of ensuring confidentiality
while using IM like: encryption, non-disclosure
of important information, restricting file sharing

International Computer Driving License Module 12

ExecuTrain of Qatar

SECURE DATA MANAGEMENT

International Computer Driving License Module 12

ExecuTrain of Qatar

Securing and Backing Up Data

Recognise ways of ensuring physical security of

devices like: log equipment location and details,
use cable locks, access
control.

International Computer Driving License Module 12

ExecuTrain of Qatar

Securing and Backing Up Data

Recognise the importance of

having a back-up procedure in case of loss of
data, financial records, web bookmarks/history.

International Computer Driving License Module 12

ExecuTrain of Qatar

Securing and Backing Up Data

Identify the features of a backup procedure like:

regularity/frequency, schedule, storage location.

International Computer Driving License Module 12

ExecuTrain of Qatar

Back up and Restore data

Back up data.
Restore and validate backed up data.

International Computer Driving License Module 12

ExecuTrain of Qatar

Secure Destruction

Understand the reason for permanently deleting

data from drives or devices.
Distinguish between deleting and permanently
destroying data

International Computer Driving License Module 12

ExecuTrain of Qatar

Secure Destruction
Identify common methods of permanently
destroying data like:

shredding
drive/media destruction
degaussing
Using data destruction utilities.

International Computer Driving License Module 12

ExecuTrain of Qatar

International Computer Driving License