[F2ICT] Security of data

[F2ICT] Security of data

By Andy tsui

Objectives

Additional data security threats

Some methods to protect / prevent loss from security threat​

Subject | Subject

Some text here about the topic of discussion

Multiple Select

Computer virus ....

• Replicate itself automatically

• will infect human

• Usually do no harm to computer

• You can install anti-virus to prevent

Computer Virus

• Is a computer program that copy itself

• Can leads to corrupting data or causing malfunction of a computer

• Install Anti-virus s​oftware to detect / remove

• Do not use software from unknown source​

Spam (email)

• Spam email is usually email that sent to a mass group of address

• Sometimes just advertisement but may contains malicious software

• Avoid signing to mailing lists

• Nowadays most email service provide spam filter

Subject | Subject

Some text here about the topic of discussion

Multiple Choice

Keylogger collects key presses and send back to the hacker through network. Which of the following measure can stop this?

• Anti virus

• Strong password

• Firewall

• spam filter

Multiple Select

Hacking is gaining unauthorised access to a system. What can help to prevent?

• firewall

• strong password

• anti virus

• backup

Open Ended

After watching the video, briefly explain how a firewall works, with your own words.

Firewall

• Firewall is either software or hardware

• Inspect all the data going in or​ out of a network (or computer)

• Users can define some "rules" for the firewall to allow or block certain pattern of data

Subject | Subject

Some text here about the topic of discussion

​Firewall sits in between your computer and the rest of the Internet

Open Ended

What is encryption?

Encryption

• Altering the characters in a message into meaningless data

• Using algorithm and encryption key

• Interceptor cannot understand the message

Subject | Subject

Some text here about the topic of discussion

• ​Plaintext - unencrypted data (original)

• Key - a secret "formula" for ​encrypt and decrypt

• Ciphertext - encrypted message​

Digital Certificate

• Function of Digital certificate is similar to an ID Card, but apply to websites or individuals online

• Certificate is sign by a third party authority - some organisation you can trust

Subject | Subject

Some text here about the topic of discussion

TLS (Transport layer security)

• TLS is a set of rule (protocol) to ensure a website is safe to use

• it combines the followings:

  • Verifying digital certificate

  • Establishing encr​yption of data

Subject | Subject

Some text here about the topic of discussion

If you see the padlock, that means the connection is secure - TLS in action!

Poll

Which of the following methods you are using to login to your smartphone?

• I don't use any

• Face ID

• Fingerprint

• PIN

• Pattern

Authentication

When logging in to a system, you need to:

• Tell the system who you are

• Prove that you are that person​

• e.g. Username and password​

Subject | Subject

Some text here about the topic of discussion

Open Ended

Suggest some rules for strong password

Biometrics

Biometrics relies on unique characteristic on human being:

e.g.

• Face ID (Facial features)

• Finger print​

Subject | Subject

Some text here about the topic of discussion

Open Ended

What other biometrics features can be used in authentication?

Conclusion

Security threats

Security measure

Authentication techniques​

Subject | Subject

Some text here about the topic of discussion