Safe Computing

Safe Computing

Replace this with a sub-header that can be in multiple lines. ​

Personally Identifiable Information

Personally Identifiable Information (PII): Information specific to an individual

Open Ended

What are some times of PII you can think of?

• Mailing Address

• Medical Information

• Credit Card Information

• and more...

• Social Security Number

• Age

• Race

• Phone Number

• Date of Birth

• Email Address

PII

​Be careful with your PII

PII can be used by people to steal someone's identity, bank funds, or to impersonate someone in order to gain access to an organization.

​Search Engines

• Search engines maintain a history of what you search

• Your search history is used to suggest other websites you may like or for targeted marketing.

  • Your location can even be collected.

PII can be exploited if privacy and other protections are ignored.

• Information placed online can be used in ways that were not intended and that may have a harmful impact.

​The Bad

PII can be used to enhance a user's online experience.

​The Good

PII: The Good and The Bad

Home

Open in new tab

Copy link

Open Ended

What could be some risks to your privacy when you plan a trip online?

Travel Sites

Travel sites and dozens of advertising and marketing firms have also begun tracking your online behavior with cookies

​Risks to Privacy

Google, Facebook, and Twitter gather more information about your behavior with their share, retweet, and like buttons they have embedded on the site.

​What does Google Know About You

This site has 6 good links to find out what Google knows about you

​Who are You?

The picture created by this activity is VERY detailed and you have very little control over who sees it.

Information placed online is difficult to delete!

​​Persistent

​Information posted to social media can be used by others and combined with other sources to deduce private information about you

​​Deduction

​This information can then be used in ways that were not intended and may have a harmful impact.

​​Harmful

How Can We Protect Ourselves?

Authentication

Authentication measures protect devices and information from unauthorized access.

Authentication measures include:

• Strong passwords

• Multi-factor authentication

• 10 or more characters

• Contain a symbol

• Contain a number

• Contain lowercase and uppercase letters

**Per College Board

​

​Strong Passwords

What You Know

What You Have

What You Are

​Multi-Factor Authentication

Virus and Malware

A "virus" is a malicious program that can copy themselves and gain access to systems that they are not supposed to be allowed in

"Malware" is a program intended to damage a computing system or take partial control over its operation

• Can infiltrate a system by posing as a legitimate program or by attaching itself to legitimate programs, like an email attachment

Virus scans can help to prevent malicious code from getting into and affecting your system

Virus Scan

• Once legitimate access to a system is gained, it is important to ensure data sent to and from the system remains uncompromised.

• Encryption: the process of encoding data to prevent unauthorized access

• Decryption: the process of decoding data

Encryption

Decryption

​Asymmetric Encryption

One key used to both encrypt and decrypt data

Example: Caesar Cipher

​Symmetric Encryption

Encryption and Decryption

Match

Try to match these encrypted/decrypted words in the correct pairs

• ilgnv

• lognv

• vogil

• lmnop

• ugvon

chart

heart

teach

horse

water

• chart

• heart

• teach

• horse

• water

​Asymmetric Encryption

One key used to both encrypt and decrypt data

Example: Caesar Cipher

​Symmetric Encryption

Encryption and Decryption

​Asymmetric Encryption

• Public Key Encryption: uses two keys

  • A public key for encrypting

  • A private key for decrypting

• A sender does not need the receiver's private key to encrypt a message

• The receiver's private key IS required to decrpt the message

Digital Certificates

Certificate authorities issue digital certificates that validate the ownership of encryption keys used in secure communications and are based on a trust model

An attempt to trick a user into providing personal information, like your usernames and passwords, account numbers, or social security numbers.

​

​Phishing

Phishing

They trick you into clicking a link or opening an attachment which will cause unexpected harm:

• virus installed on your computer

• spoofed banking website

• keylogger installed

Phishing emails look like they're from a company you know and trust:

• your bank

• your credit card company

• social networking sites

• video streaming services

• online store

Keylogger

Records every keystroke made by a user in order to gain fraudulent access passwords other confidential information.

Rogue Access Point

A wireless network that can give authorized access to secure network

Multiple Choice

StreamPal is an audio-streaming application for mobile devices that allows users to listen to streaming music and connect with other users who have similar taste in music. After downloading the application, each user creates a username, personal profile, and contact list of friends who also use the application.

The application uses the device’s GPS unit to track a user’s location. Each time a user listens to a song, the user can give it a rating from 0 to 5 stars. The user can access the following features for each song that the user has rated.

A list of users on the contact list who have given the song the same rating, with links to those users’ profiles

A map showing all other users in the area who have given the song the same rating, with links to those users’ profiles

A basic StreamPal account is free, but it displays advertisements that are based on data collected by the application. For example, if a user listens to a particular artist, the application may display an advertisement for concert tickets the next time the artist comes to the user’s city. Users have the ability to pay a monthly fee for a premium account, which removes advertisements from the application.

Question

Which of the following is most likely to be a data privacy concern for StreamPal users?

• Users of the application are required to rate songs in order to enable all of the application’s features.

• Users of the application may have the ability to determine information about the locations of users that are not on their contact list.

• Users of the application may not be able to use the application if they are located in an area with a poor Internet connection.

• Users of the application may not have similar music taste to any other users on their contact list.

Multiple Choice

StreamPal is an audio-streaming application for mobile devices that allows users to listen to streaming music and connect with other users who have similar taste in music. After downloading the application, each user creates a username, personal profile, and contact list of friends who also use the application.

The application uses the device’s GPS unit to track a user’s location. Each time a user listens to a song, the user can give it a rating from 0 to 5 stars. The user can access the following features for each song that the user has rated.

A list of users on the contact list who have given the song the same rating, with links to those users’ profiles

A map showing all other users in the area who have given the song the same rating, with links to those users’ profiles

A basic StreamPal account is free, but it displays advertisements that are based on data collected by the application. For example, if a user listens to a particular artist, the application may display an advertisement for concert tickets the next time the artist comes to the user’s city. Users have the ability to pay a monthly fee for a premium account, which removes advertisements from the application.

Question

Which of the following statements is most likely true about the differences between the basic version and the premium version of StreamPal?

• Users of the basic version of StreamPal are more likely to give songs higher ratings than are users of the premium version of StreamPal.

• Users of the basic version of StreamPal indirectly support StreamPal by allowing themselves to receive advertisements.

• Users of the basic version of StreamPal spend more on monthly fees than do users of the premium version of StreamPal.

• Users of the basic version of StreamPal use less data storage space on their devices than do users of the premium version of StreamPal.

Multiple Choice

A user unintentionally installs keylogging software on a computer. Which of the following is an example of how the keylogging software can be used by an unauthorized individual to gain access to computing resources?

• The software gives an unauthorized individual remote access to the computer, allowing the individual to search the computer for personal information.

• The software installs a virus on the computer and prompts the user to make a payment to the unauthorized individual to remove the virus.

• The software prompts the user to enter personal information to verify the user’s identity. This personal information is recorded and transmitted to an unauthorized individual.

• The software records all user input on the computer. The recorded information is transmitted to an unauthorized individual, who analyzes it to determine the user’s login passwords.

Multiple Choice

An individual receives an e-mail that appears to be from an insurance company. The message offers a low insurance rate, and prompts the recipient to click a link to learn more. Which of the following is most indicative that the e-mail is part of a phishing attempt?

• After clicking the link, a browser cookie is downloaded to the recipient’s computer.

• After clicking the link, a Web page opens that prompts the recipient for personal information.

• After clicking the link, the recipient’s private network becomes publicly visible via a rogue access point.

• After clicking the link, software is installed on the recipient’s computer that records every keystroke made on the computer.

Multiple Choice

A city’s police department has installed cameras throughout city streets. The cameras capture and store license plate data from cars driven and parked throughout the city. The authorities use recorded license plate data to identify stolen cars and to enforce parking regulations.

Which of the following best describes a privacy risk that could occur if this method of data collection is misused?

• The cameras may not be able to read license plates in poor weather conditions.

• Local business owners could lose customers who are unwilling to park in the city.

• Traffic personnel who work for the city could lose their jobs if their services are no longer needed.

• The vehicle location data could be used to monitor the movements of city residents.

Multiple Choice

Which of the following best exemplifies the use of multifactor authentication?

• A computing device enables users to input information using multiple interfaces, including a keyboard, a mouse, and a touch pad.

• A user employs a public key encryption method that uses one key to encrypt information and a different key to decrypt information.

• A Web site requires a user to enter a password as well as a numeric code received via text message before the user can log in to an account.

• Multiple users share an account to a Web-based software program, and each user has an individual username and password.