{"id":326,"date":"2018-07-12T11:25:32","date_gmt":"2018-07-12T11:25:32","guid":{"rendered":"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/?post_type=chapter&#038;p=326"},"modified":"2019-05-14T10:38:12","modified_gmt":"2019-05-14T10:38:12","slug":"privacy-concept","status":"publish","type":"chapter","link":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/chapter\/privacy-concept\/","title":{"rendered":"Privacy Concept"},"content":{"raw":"<div><span style=\"float: right;\"><a href=\"https:\/\/youtu.be\/_hRRxYKNRg4\" target=\"_blank\" rel=\"noopener\"><img src=\"http:\/\/epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/2018\/11\/download.png\" alt=\"epgp books\" width=\"75px\" height=\"75px;\" \/><\/a>\r\n<\/span><\/div>\r\n\r\n<strong>Privacy Concept<\/strong>\r\n\r\n&nbsp;\r\n\r\nInformation privacy has 3 aspects.\r\n<ol>\r\n \t<li>Sensitive data<\/li>\r\n \t<li>Affected parties<\/li>\r\n \t<li>Controlled access<\/li>\r\n<\/ol>\r\n<strong>Controlled Disclosure<\/strong>\r\n<ul>\r\n \t<li>Privacy is considered to be the right to have power on who can learn about user, communications conducted by user and activities performed by user.<\/li>\r\n<\/ul>\r\n<strong>Sensitive data<\/strong>\r\n\r\n<img class=\"size-full wp-image-327 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212.png\" alt=\"\" width=\"853\" height=\"768\" \/>\r\n\r\nData people may consider private:\r\n<ul>\r\n \t<li>Identity<\/li>\r\n \t<li>Finance matters, details of bank account<\/li>\r\n \t<li>Legal matters<\/li>\r\n \t<li>Medical reports<\/li>\r\n \t<li>Voting, opinions<\/li>\r\n \t<li>Preferences- religion<\/li>\r\n \t<li>Biometric, physical characteristics<\/li>\r\n \t<li>Diaries, poems<\/li>\r\n \t<li>Privileged communication<\/li>\r\n \t<li>Performance in school reflected in record books<\/li>\r\n<\/ul>\r\n<ul>\r\n \t<li>Ratings based on performance at work place by employer<\/li>\r\n \t<li>Activities \u2013 reading habits<\/li>\r\n \t<li>Air travel data<\/li>\r\n \t<li>Communications<\/li>\r\n \t<li>History<\/li>\r\n \t<li>Illegal activities, criminal records<\/li>\r\n \t<li><img class=\"size-large wp-image-328 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-1024x775.png\" alt=\"\" width=\"1024\" height=\"775\" \/><\/li>\r\n<\/ul>\r\n<strong>Computer Related Privacy Problems:<\/strong>\r\n\r\n&nbsp;\r\n\r\n<img class=\"size-large wp-image-329 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-1024x639.png\" alt=\"\" width=\"1024\" height=\"639\" \/>\r\n\r\n&nbsp;\r\n<ol>\r\n \t<li style=\"text-align: justify\">Data Collection\u00a0 Computer storage stores gigabytes of data or terabytes of data.Google\u2019s stored data is measured in petabytes.Data<span style=\"text-align: initial;font-size: 1em\"> is never thrown away, Data is moved to slower secondary media.<\/span><\/li>\r\n \t<li style=\"text-align: justify\">No informed Consent Data is gathered from public and commercial sources. Data is gathered form<span style=\"text-align: initial;font-size: 1em\"> data passed for <\/span>purpose<span style=\"text-align: initial;font-size: 1em\">(statement to police after an accident). Data collected without knowledge of <\/span>user<span style=\"text-align: initial;font-size: 1em\">. <\/span>User<span style=\"text-align: initial;font-size: 1em\"> has not given consent for data collection. Telephone company\u2019s record Date, time, duration, caller and callee of all telephone calls Internet service provider(ISPs) track sites visited. Sites store <\/span>IP<span style=\"text-align: initial;font-size: 1em\"> addresses of visitors.<\/span><\/li>\r\n \t<li style=\"text-align: justify\">Loss of ControlThe data passed by user<span style=\"text-align: initial;font-size: 1em\"> can be distributed to <\/span>any one<span style=\"text-align: initial;font-size: 1em\">.\u00a0<\/span>User<span style=\"text-align: initial;font-size: 1em\"> has no control or less control over <\/span>dissemination<span style=\"text-align: initial;font-size: 1em\"> of data. Someone can post on <\/span>web<span style=\"text-align: initial;font-size: 1em\"> about <\/span>user<span style=\"text-align: initial;font-size: 1em\"> and <\/span>user<span style=\"text-align: initial;font-size: 1em\"> wants to remove it but can not remove <\/span>as user<span style=\"text-align: initial;font-size: 1em\"> is not the owner of the content. Archives, Mirror sites <\/span>and<span style=\"text-align: initial;font-size: 1em\"> caches ensures that data remains intact. Date exposure \u2013 Company\u2019s records are compromised, data is revealed.\u00a0<\/span>Company<span style=\"text-align: initial;font-size: 1em\"> is not responsible for this.<\/span><\/li>\r\n \t<li style=\"text-align: justify\">Ownership of data Computers - volumes and<span style=\"text-align: initial;font-size: 1em\"> sources of data have increased. <\/span>Subject<span style=\"text-align: initial;font-size: 1em\"> does not have right.<\/span><\/li>\r\n \t<li style=\"text-align: justify\">Fair Information Policies Committee<span style=\"text-align: initial;font-size: 1em\"> was formed that was an advisor to the secretary of the U.S. Department of Human Services. Committee recommended following on privacy issues.<\/span><\/li>\r\n<\/ol>\r\n.<img class=\"size-large wp-image-330 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-1024x406.png\" alt=\"\" width=\"1024\" height=\"406\" \/>\r\n\r\n&nbsp;\r\n\r\n<img class=\"size-large wp-image-331 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-849x1024.png\" alt=\"\" width=\"849\" height=\"1024\" \/>\r\n\r\nProtection of stored data:\r\n\r\n&nbsp;\r\n<p style=\"text-align: justify\">There are four ways to protect stored data. Suggestion by Turn and Ware. Limit the exposure of data. Use Random sampling .\u00a0Add errors or interchange data items to reduce data sensitivity. Remove or modify the data elements that identify data items. Anonymize the data.Encrypt the data.<\/p>\r\n&nbsp;\r\n\r\nU.S. Privacy laws :\r\n\r\n&nbsp;\r\n<p style=\"text-align: justify\">United States has formed laws that protect collected data that is hold by other organizations. For Consumer credit, Fair Credit Reporting Act is referred. Health Insurance Probability and Accountability Act(HIPAA) addresses health information. Finance related service or organization is referred in the Gramm-Leach-Bliley Act(GLBA). Children\u2019s web access related issues are covered in the children\u2019s Online Privacy Protection Act(COPPA). Student information related records are addressed in Federal Educational Rights and Privacy acts.<\/p>\r\n&nbsp;\r\n\r\nPolicies posted after Health Insurance Probability and Accountability Act(HIPAA) :\r\n\r\n&nbsp;\r\n<p style=\"text-align: justify\">Statements on data transfer are compact. Consumers have control over exposure and distribution of data. Short and simple statements are formed. For same industry, Statements varied largely within same industry branch, proving hard for comparison of policies. Web page contained only statements related to specific topic.<\/p>\r\n&nbsp;\r\n\r\nControls on U.S. Government Web Sites:\r\n<ul>\r\n \t<li>Notice - Reveal the information practices.<\/li>\r\n \t<li>Enforcement Mechanism \u2013 Mechanism to impose.<\/li>\r\n \t<li>Security - Ensure that data is secured from unauthorized user.<\/li>\r\n \t<li>Choice \u2013 How collected personal information must be used.<\/li>\r\n \t<li>Access - check the accuracy and completeness of data.<\/li>\r\n<\/ul>\r\nIn 2002, U.S. Congress formed e-Government act. According to that act agencies of Federal Government have to put privacy policies on the web sites disclosing following :\r\n<ul>\r\n \t<li>Information to be collected<\/li>\r\n \t<li>Reason behind collecting information<\/li>\r\n \t<li>Intended use by the agency<\/li>\r\n \t<li>Sharing of information<\/li>\r\n \t<li>Notice or consent \u2013 information collected is pertaining to which subject and how sharing of information is done<\/li>\r\n \t<li>Way of securing information<\/li>\r\n \t<li>Rights of individual under the Privacy Act and other laws.<\/li>\r\n<\/ul>\r\n<p style=\"text-align: justify\">\u00a0 \u00a0 The e-Government Act forms strong restrictions on how Data must be collected through web sites. Federal trade commission (FTC) prosecutes companies that employ deceptive trade or unjust business practices. FTC takes action in case, Company advertises in a misleading way or Company says it will protect privacy and it does not.<\/p>\r\n&nbsp;\r\n\r\n<strong>Privacy notices at the bottom of the web site carries meaning because of FTC.<\/strong>\r\n\r\n&nbsp;\r\n\r\n<strong>Case Study:<\/strong>\r\n\r\n&nbsp;\r\n<p style=\"text-align: justify\">FTC prosecuted CartManager International. CartManager runs web shopping cart software to collect items of an order, get customer\u2019s name and address, shipping and details related to payment. The software is an add on, runs with retail merchants\u2019 web sites and handles processing of order. Retailers had privacy statement indicating not to sell customer data but CartManager sold the data.Non U.S. Privacy principles :\u00a0 European Union (E.U.) adopted directive 95\/46\/EC on processing of personal data.\u00a0\u00a0Directive is called European Privacy Directive. European Privacy Directive directs that data about individual must be<\/p>\r\n\r\n<ul>\r\n \t<li>Processed fairly and lawfully<\/li>\r\n \t<li>Purpose must be specific, explicit and legitimate.<\/li>\r\n \t<li>Concise, and related to purpose only.<\/li>\r\n \t<li>Format must identify the subjects and must be aligned with subject and further processing.<\/li>\r\n \t<li>Special protection for sensitive data<\/li>\r\n \t<li>Data transfer<\/li>\r\n \t<li>Independent oversight<\/li>\r\n<\/ul>\r\nAnonymity :\r\n<ul>\r\n \t<li>Anonymity is hiding the identity.<\/li>\r\n \t<li>Anonymity reduces discrimination.<\/li>\r\n \t<li>Problems with anonymity \u2013 How to pay for something?<\/li>\r\n<\/ul>\r\nMultiple Identities :\r\n<ul>\r\n \t<li>People have multiple identities.<\/li>\r\n \t<li>Bank account number, Driving License number, Credit card number \u2013 different for same person.<\/li>\r\n<\/ul>\r\nPseudonymity :\r\n\r\n&nbsp;\r\n\r\nUnique identifiers that link records in database maintained at server. These identifiers do not reveal real identity.\r\n\r\n&nbsp;\r\n\r\n<img class=\"size-large wp-image-332 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-1024x375.png\" alt=\"\" width=\"1024\" height=\"375\" \/>\r\n<ul>\r\n \t<li style=\"text-align: justify\">Pseudonyms are registered\u00a0 with E-mail providers those provide anonymous drop boxes to perform e-mail communication.<\/li>\r\n \t<li>Pseudonyms are used in chatting.<\/li>\r\n<\/ul>\r\n\r\n<table>\r\n<tbody>\r\n<tr>\r\n<td><strong>you can view video on Privacy Concept<\/strong><\/td>\r\n<td><a href=\"https:\/\/youtu.be\/_hRRxYKNRg4\" target=\"_blank\" rel=\"noopener\"><img class=\"alignnone wp-image-120\" src=\"http:\/\/epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/2018\/11\/download.png\" alt=\"\" width=\"36\" height=\"36\" \/><\/a><\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n\r\n<strong>Suggested Reading:<\/strong>\r\n<ol>\r\n \t<li>Cryptography and Network Security Principles and Practice by William Stallings, sixth Edition, PEARSON.<\/li>\r\n \t<li>Security in Computing by Charles Pfleeger &amp; Shari Lawrence Pfleeger, fourth Edition, PEARSON.<\/li>\r\n \t<li>Network Security by Charlie Kaufman, Radia Perlman, Mike Speciner, second Edition, PHI.<\/li>\r\n \t<li>The Complete Reference \u2013 Network Security by Roberta Bragg, Mark Rhodes-Ousley &amp; Keith Strassberg, Tata McGraw Hill<\/li>\r\n \t<li>Network Security Bible by Eric Cole, Ronald Krutz, James Conley, Wiley<\/li>\r\n \t<li>Hacking 6 Exposed by Stuart McClure, Joel Scambray &amp; George Kurtz , Tata McGraw Hill .<\/li>\r\n \t<li><a href=\"http:\/\/www.snort.org\/\">www.snort.org<\/a><\/li>\r\n \t<li><a style=\"text-align: initial;font-size: 1em\" href=\"https:\/\/nmap.org\/\">https:\/\/nmap.org<\/a><\/li>\r\n<\/ol>","rendered":"<div><span style=\"float: right;\"><a href=\"https:\/\/youtu.be\/_hRRxYKNRg4\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"http:\/\/epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/2018\/11\/download.png\" alt=\"epgp books\" width=\"75px\" height=\"75px;\" \/><\/a><br \/>\n<\/span><\/div>\n<p><strong>Privacy Concept<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>Information privacy has 3 aspects.<\/p>\n<ol>\n<li>Sensitive data<\/li>\n<li>Affected parties<\/li>\n<li>Controlled access<\/li>\n<\/ol>\n<p><strong>Controlled Disclosure<\/strong><\/p>\n<ul>\n<li>Privacy is considered to be the right to have power on who can learn about user, communications conducted by user and activities performed by user.<\/li>\n<\/ul>\n<p><strong>Sensitive data<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-327 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212.png\" alt=\"\" width=\"853\" height=\"768\" srcset=\"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212.png 853w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212-300x270.png 300w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212-768x691.png 768w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212-65x59.png 65w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212-225x203.png 225w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-212-350x315.png 350w\" sizes=\"auto, (max-width: 853px) 100vw, 853px\" \/><\/p>\n<p>Data people may consider private:<\/p>\n<ul>\n<li>Identity<\/li>\n<li>Finance matters, details of bank account<\/li>\n<li>Legal matters<\/li>\n<li>Medical reports<\/li>\n<li>Voting, opinions<\/li>\n<li>Preferences- religion<\/li>\n<li>Biometric, physical characteristics<\/li>\n<li>Diaries, poems<\/li>\n<li>Privileged communication<\/li>\n<li>Performance in school reflected in record books<\/li>\n<\/ul>\n<ul>\n<li>Ratings based on performance at work place by employer<\/li>\n<li>Activities \u2013 reading habits<\/li>\n<li>Air travel data<\/li>\n<li>Communications<\/li>\n<li>History<\/li>\n<li>Illegal activities, criminal records<\/li>\n<li><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-328 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-1024x775.png\" alt=\"\" width=\"1024\" height=\"775\" srcset=\"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-1024x775.png 1024w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-300x227.png 300w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-768x581.png 768w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-65x49.png 65w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-225x170.png 225w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213-350x265.png 350w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-213.png 1066w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/li>\n<\/ul>\n<p><strong>Computer Related Privacy Problems:<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-329 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-1024x639.png\" alt=\"\" width=\"1024\" height=\"639\" srcset=\"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-1024x639.png 1024w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-300x187.png 300w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-768x479.png 768w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-65x41.png 65w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-225x140.png 225w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214-350x218.png 350w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-214.png 1035w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<p>&nbsp;<\/p>\n<ol>\n<li style=\"text-align: justify\">Data Collection\u00a0 Computer storage stores gigabytes of data or terabytes of data.Google\u2019s stored data is measured in petabytes.Data<span style=\"text-align: initial;font-size: 1em\"> is never thrown away, Data is moved to slower secondary media.<\/span><\/li>\n<li style=\"text-align: justify\">No informed Consent Data is gathered from public and commercial sources. Data is gathered form<span style=\"text-align: initial;font-size: 1em\"> data passed for <\/span>purpose<span style=\"text-align: initial;font-size: 1em\">(statement to police after an accident). Data collected without knowledge of <\/span>user<span style=\"text-align: initial;font-size: 1em\">. <\/span>User<span style=\"text-align: initial;font-size: 1em\"> has not given consent for data collection. Telephone company\u2019s record Date, time, duration, caller and callee of all telephone calls Internet service provider(ISPs) track sites visited. Sites store <\/span>IP<span style=\"text-align: initial;font-size: 1em\"> addresses of visitors.<\/span><\/li>\n<li style=\"text-align: justify\">Loss of ControlThe data passed by user<span style=\"text-align: initial;font-size: 1em\"> can be distributed to <\/span>any one<span style=\"text-align: initial;font-size: 1em\">.\u00a0<\/span>User<span style=\"text-align: initial;font-size: 1em\"> has no control or less control over <\/span>dissemination<span style=\"text-align: initial;font-size: 1em\"> of data. Someone can post on <\/span>web<span style=\"text-align: initial;font-size: 1em\"> about <\/span>user<span style=\"text-align: initial;font-size: 1em\"> and <\/span>user<span style=\"text-align: initial;font-size: 1em\"> wants to remove it but can not remove <\/span>as user<span style=\"text-align: initial;font-size: 1em\"> is not the owner of the content. Archives, Mirror sites <\/span>and<span style=\"text-align: initial;font-size: 1em\"> caches ensures that data remains intact. Date exposure \u2013 Company\u2019s records are compromised, data is revealed.\u00a0<\/span>Company<span style=\"text-align: initial;font-size: 1em\"> is not responsible for this.<\/span><\/li>\n<li style=\"text-align: justify\">Ownership of data Computers &#8211; volumes and<span style=\"text-align: initial;font-size: 1em\"> sources of data have increased. <\/span>Subject<span style=\"text-align: initial;font-size: 1em\"> does not have right.<\/span><\/li>\n<li style=\"text-align: justify\">Fair Information Policies Committee<span style=\"text-align: initial;font-size: 1em\"> was formed that was an advisor to the secretary of the U.S. Department of Human Services. Committee recommended following on privacy issues.<\/span><\/li>\n<\/ol>\n<p>.<img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-330 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-1024x406.png\" alt=\"\" width=\"1024\" height=\"406\" srcset=\"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-1024x406.png 1024w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-300x119.png 300w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-768x304.png 768w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-65x26.png 65w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-225x89.png 225w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215-350x139.png 350w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-215.png 1476w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-331 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-849x1024.png\" alt=\"\" width=\"849\" height=\"1024\" srcset=\"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-849x1024.png 849w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-249x300.png 249w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-768x927.png 768w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-65x78.png 65w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-225x272.png 225w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216-350x422.png 350w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-216.png 856w\" sizes=\"auto, (max-width: 849px) 100vw, 849px\" \/><\/p>\n<p>Protection of stored data:<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify\">There are four ways to protect stored data. Suggestion by Turn and Ware. Limit the exposure of data. Use Random sampling .\u00a0Add errors or interchange data items to reduce data sensitivity. Remove or modify the data elements that identify data items. Anonymize the data.Encrypt the data.<\/p>\n<p>&nbsp;<\/p>\n<p>U.S. Privacy laws :<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify\">United States has formed laws that protect collected data that is hold by other organizations. For Consumer credit, Fair Credit Reporting Act is referred. Health Insurance Probability and Accountability Act(HIPAA) addresses health information. Finance related service or organization is referred in the Gramm-Leach-Bliley Act(GLBA). Children\u2019s web access related issues are covered in the children\u2019s Online Privacy Protection Act(COPPA). Student information related records are addressed in Federal Educational Rights and Privacy acts.<\/p>\n<p>&nbsp;<\/p>\n<p>Policies posted after Health Insurance Probability and Accountability Act(HIPAA) :<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify\">Statements on data transfer are compact. Consumers have control over exposure and distribution of data. Short and simple statements are formed. For same industry, Statements varied largely within same industry branch, proving hard for comparison of policies. Web page contained only statements related to specific topic.<\/p>\n<p>&nbsp;<\/p>\n<p>Controls on U.S. Government Web Sites:<\/p>\n<ul>\n<li>Notice &#8211; Reveal the information practices.<\/li>\n<li>Enforcement Mechanism \u2013 Mechanism to impose.<\/li>\n<li>Security &#8211; Ensure that data is secured from unauthorized user.<\/li>\n<li>Choice \u2013 How collected personal information must be used.<\/li>\n<li>Access &#8211; check the accuracy and completeness of data.<\/li>\n<\/ul>\n<p>In 2002, U.S. Congress formed e-Government act. According to that act agencies of Federal Government have to put privacy policies on the web sites disclosing following :<\/p>\n<ul>\n<li>Information to be collected<\/li>\n<li>Reason behind collecting information<\/li>\n<li>Intended use by the agency<\/li>\n<li>Sharing of information<\/li>\n<li>Notice or consent \u2013 information collected is pertaining to which subject and how sharing of information is done<\/li>\n<li>Way of securing information<\/li>\n<li>Rights of individual under the Privacy Act and other laws.<\/li>\n<\/ul>\n<p style=\"text-align: justify\">\u00a0 \u00a0 The e-Government Act forms strong restrictions on how Data must be collected through web sites. Federal trade commission (FTC) prosecutes companies that employ deceptive trade or unjust business practices. FTC takes action in case, Company advertises in a misleading way or Company says it will protect privacy and it does not.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Privacy notices at the bottom of the web site carries meaning because of FTC.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Case Study:<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify\">FTC prosecuted CartManager International. CartManager runs web shopping cart software to collect items of an order, get customer\u2019s name and address, shipping and details related to payment. The software is an add on, runs with retail merchants\u2019 web sites and handles processing of order. Retailers had privacy statement indicating not to sell customer data but CartManager sold the data.Non U.S. Privacy principles :\u00a0 European Union (E.U.) adopted directive 95\/46\/EC on processing of personal data.\u00a0\u00a0Directive is called European Privacy Directive. European Privacy Directive directs that data about individual must be<\/p>\n<ul>\n<li>Processed fairly and lawfully<\/li>\n<li>Purpose must be specific, explicit and legitimate.<\/li>\n<li>Concise, and related to purpose only.<\/li>\n<li>Format must identify the subjects and must be aligned with subject and further processing.<\/li>\n<li>Special protection for sensitive data<\/li>\n<li>Data transfer<\/li>\n<li>Independent oversight<\/li>\n<\/ul>\n<p>Anonymity :<\/p>\n<ul>\n<li>Anonymity is hiding the identity.<\/li>\n<li>Anonymity reduces discrimination.<\/li>\n<li>Problems with anonymity \u2013 How to pay for something?<\/li>\n<\/ul>\n<p>Multiple Identities :<\/p>\n<ul>\n<li>People have multiple identities.<\/li>\n<li>Bank account number, Driving License number, Credit card number \u2013 different for same person.<\/li>\n<\/ul>\n<p>Pseudonymity :<\/p>\n<p>&nbsp;<\/p>\n<p>Unique identifiers that link records in database maintained at server. These identifiers do not reveal real identity.<\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-large wp-image-332 aligncenter\" src=\"http:\/\/itp4.epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-1024x375.png\" alt=\"\" width=\"1024\" height=\"375\" srcset=\"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-1024x375.png 1024w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-300x110.png 300w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-768x282.png 768w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-65x24.png 65w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-225x83.png 225w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217-350x128.png 350w, https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-content\/uploads\/sites\/25\/2018\/07\/Untitled-217.png 1350w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<ul>\n<li style=\"text-align: justify\">Pseudonyms are registered\u00a0 with E-mail providers those provide anonymous drop boxes to perform e-mail communication.<\/li>\n<li>Pseudonyms are used in chatting.<\/li>\n<\/ul>\n<table>\n<tbody>\n<tr>\n<td><strong>you can view video on Privacy Concept<\/strong><\/td>\n<td><a href=\"https:\/\/youtu.be\/_hRRxYKNRg4\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-120\" src=\"http:\/\/epgpbooks.inflibnet.ac.in\/wp-content\/uploads\/2018\/11\/download.png\" alt=\"\" width=\"36\" height=\"36\" \/><\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Suggested Reading:<\/strong><\/p>\n<ol>\n<li>Cryptography and Network Security Principles and Practice by William Stallings, sixth Edition, PEARSON.<\/li>\n<li>Security in Computing by Charles Pfleeger &amp; Shari Lawrence Pfleeger, fourth Edition, PEARSON.<\/li>\n<li>Network Security by Charlie Kaufman, Radia Perlman, Mike Speciner, second Edition, PHI.<\/li>\n<li>The Complete Reference \u2013 Network Security by Roberta Bragg, Mark Rhodes-Ousley &amp; Keith Strassberg, Tata McGraw Hill<\/li>\n<li>Network Security Bible by Eric Cole, Ronald Krutz, James Conley, Wiley<\/li>\n<li>Hacking 6 Exposed by Stuart McClure, Joel Scambray &amp; George Kurtz , Tata McGraw Hill .<\/li>\n<li><a href=\"http:\/\/www.snort.org\/\">www.snort.org<\/a><\/li>\n<li><a style=\"text-align: initial;font-size: 1em\" href=\"https:\/\/nmap.org\/\">https:\/\/nmap.org<\/a><\/li>\n<\/ol>\n","protected":false},"author":4,"menu_order":34,"template":"","meta":{"pb_show_title":"on","pb_short_title":"","pb_subtitle":"","pb_authors":["miss-hiteishi-diwanji"],"pb_section_license":""},"chapter-type":[],"contributor":[58],"license":[],"class_list":["post-326","chapter","type-chapter","status-publish","hentry","contributor-miss-hiteishi-diwanji"],"part":3,"_links":{"self":[{"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/pressbooks\/v2\/chapters\/326","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/pressbooks\/v2\/chapters"}],"about":[{"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/wp\/v2\/types\/chapter"}],"author":[{"embeddable":true,"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/wp\/v2\/users\/4"}],"version-history":[{"count":5,"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/pressbooks\/v2\/chapters\/326\/revisions"}],"predecessor-version":[{"id":479,"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/pressbooks\/v2\/chapters\/326\/revisions\/479"}],"part":[{"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/pressbooks\/v2\/parts\/3"}],"metadata":[{"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/pressbooks\/v2\/chapters\/326\/metadata\/"}],"wp:attachment":[{"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/wp\/v2\/media?parent=326"}],"wp:term":[{"taxonomy":"chapter-type","embeddable":true,"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/pressbooks\/v2\/chapter-type?post=326"},{"taxonomy":"contributor","embeddable":true,"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/wp\/v2\/contributor?post=326"},{"taxonomy":"license","embeddable":true,"href":"https:\/\/ebooks.inflibnet.ac.in\/itp4\/wp-json\/wp\/v2\/license?post=326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}