MANAGEMENT INFORMATION SYSTEMS （MAN2092）教学：Lecture08.pdfVIP

MAN2092 MANAGEMENT INFORMATION SYSTEMS Information Systems Security and User Privacy Dr Humberto Gumeta h.gumeta@surrey.ac.uk Lijin 203 Monday, 31 October 2016 1 Contents • IS Security • Why IS are vulnerable? • Hackers and computer crime • IS weakest link • Software vulnerability • Risk assessment • IS controls • Privacy • Key points Monday, 31 October 2016 2 Information Systems Security Policies, procedures and technical measures used to prevent unauthorized access, alteration, theft, or physical damage to information systems Why IS are vulnerable? • Hardware problems • Breakdowns, configuration errors, damage from improper use or crime • Software problems • Programming errors, installation errors, unauthorized changes) • Disasters • Power failures, flood, fires, etc. • Use of networks and computers outside of firm’s control • E.g., with domestic or offshore outsourcing vendors IS Security Challenges and Vulnerabilities The architecture of a Web-based application typically includes a Web client, a server, and corporate information systems linked to databases. Each of these components presents security challenges and vulnerabilities. Floods, fires, power failures, and other electrical problems can cause disruptions at any point in the network. Internet Vulnerabilities • Network open to anyone • Size of Internet means abuses can have wide impact • Use of fixed Internet addresses with permanent connections to Internet eases identification by hackers • E-mail attachments • E-mail used for transmitting trade s