{"id":147,"date":"2018-07-02T11:25:52","date_gmt":"2018-07-02T11:25:52","guid":{"rendered":"http:\/\/lisp1.epgpbooks.inflibnet.ac.in\/?post_type=chapter&p=147"},"modified":"2018-12-04T10:21:24","modified_gmt":"2018-12-04T10:21:24","slug":"informationprincipal-securityinvestigatorissues-in-the-networked-environment","status":"publish","type":"chapter","link":"https:\/\/ebooks.inflibnet.ac.in\/lisp1\/chapter\/informationprincipal-securityinvestigatorissues-in-the-networked-environment\/","title":{"rendered":"Information Principal Security Investigator issues in the Networked environment"},"content":{"raw":"
\"epgp<\/a>\r\n<\/span><\/div>\r\n \r\n\r\n \r\n\r\nI.\u00a0<\/strong>Objectives<\/strong>\r\n

The objective of this unit is to provide the students with an overview of the major security issues involved in a networked environment. On completing this unit, the student should be in a position to understand the risks involved as also get an idea of the mechanisms that need to be put in place by way of solutions to secure the information.<\/span><\/p>\r\n

II.\u00a0\u00a0\u00a0 <\/strong>Learning Outcome<\/strong><\/p>\r\n

On completing this module you should have an understanding of the different kinds of threats to information security. You should also have a clear understanding of the terminology in this regard. It is also expected that you have an idea of the measures that are widely employed to ensure information security, especially in the network environment<\/span><\/p>\r\n

III.\u00a0\u00a0 <\/strong>Structure of the Module<\/strong><\/p>\r\n\r\n

\r\n\r\n1.\u00a0 Information and Networked Environment \u2013 an introduction\r\n\r\n2.\u00a0 \u00a0Information security aspects\r\n

2.1.\u00a0\u00a0\u00a0\u00a0\u00a0 The challenges to provide information security<\/p>\r\n

2.2.\u00a0\u00a0 Why should be information secured?<\/p>\r\n

2.3.\u00a0\u00a0 Three elements of Information Security<\/p>\r\n

2.3.1. Confidentiality<\/p>\r\n

2.3.2. Integrity<\/p>\r\n

2.3.3. Availability<\/p>\r\n3.\u00a0\u00a0\u00a0\u00a0 Main controls aimed at protecting the C-I-A triad.\r\n

3.1. Identification<\/p>\r\n

3.2. Authentication<\/p>\r\n

3.3. Authorization<\/p>\r\n

3.4. Accountability<\/p>\r\n

3.5. Privacy<\/p>\r\n4.\u00a0 Threats to Information Security\r\n

4.1. Information security policy \u2013 a mandate for the organizations.<\/p>\r\n

4.2. Best Practices to Protect Digital Assets.<\/p>\r\n

4.3. Other simple best practices<\/p>\r\n5.\u00a0 Wireless World creating serious security vulnerabilities\r\n\r\n6.\u00a0 The security and privacy issues associated with social networking sites\r\n

6.1. Precautions to be taken<\/p>\r\n7.\u00a0 Summary\r\n\r\n8. References<\/span>\r\n\r\n \r\n\r\n1. Information and Networked Environment \u2013 An Introduction<\/strong>\r\n\r\n \r\n

In the present society, it is a proven fact that information is \u2018power\u2019, information is \u2018wealth\u2019. Information is almost like air that continuously flows. Information flows from human to human, human to machine, machine to machine. Information takes different forms namely handwritten documents, printed documents, voice, text, image, video, etc. The Internet is the core of the Information Society.<\/span><\/p>\r\n \r\n

The Internet is not a single network, but a worldwide collection of loosely connected networks that are accessible by individual computer hosts, in a variety of ways, to anyone with a computer and a network connection. Thus, individuals and organizations can reach any point on the internet without regard to national or geographic boundaries or time of day. However, along with the convenience and ease of access to information come risks. Among them are the risks that valuable information may be lost, stolen, altered, or misused. If information is recorded electronically and is available on networked computers, it is more vulnerable than if the same information is printed on paper and locked in a file cabinet. Intruders do not need to enter an office or home; they may not even be in the same country. They can steal or tamper with information without touching a piece of paper or a photocopier. They can also create new electronic files, run their own programs, and hide evidence of their unauthorized activity.<\/span><\/p>\r\n \r\n

Computers have become an inevitable and essential component of information society today. One cannot imagine a professional life or personal life without computers. Once upon a time, computer used to be an expensive, bulky machine that was used only for number crunching purposes and for handling complicated mathematical operations. Computers were the property of only big and rich organizations. They were available in the form of mainframe computers and mini computers wherein terminals (input\/output devices) had to be connected to get the work done. But today computers are available in different forms like desktop, laptop, tablets, smart phones, and \u2018Google glass\u2019, etc. It\u2019s amazing to note that there has been a paradigm shift in the functionality of computer. Present day computer does:<\/span><\/p>\r\n\r\n<\/div>\r\n

\r\n\r\n \r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Number crunching;\r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Information (content) generation;\r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Information processing;\r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Communication;<\/span>\r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Provide entertainment;<\/span>\r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Monitoring and many more.<\/span>\r\n\r\n<\/div>\r\n
\r\n\r\n \r\n

Out of these functions, the \u2018magic role\u2019 played by computers is to create Information Networked Society. The largest engineered system ever created by mankind, namely Internet, binds or connects or networks millions of such computers to create Information Networked Society. Internet has converted the whole world in to what is known as \u2018global village\u2019. Let us look at the basic elements of internet.<\/p>\r\n \r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 User end machines \/ Hosts\r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Network\r\n\r\n\u2022\u00a0\u00a0\u00a0\u00a0\u00a0 Protocols\r\n\r\n \r\n

User end machine could be a desktop, laptop, a smart phone that creates and exchanges information in the form voice, text, image, video or a combination of these. In other words, information is also called \u2018content\u2019. Network deals with how the machines \/ gadgets creating and exchanging information are connected using a set of hardware and software. The process of exchanging information is popularly known as protocol. Figure below presents a macro-view of the building blocks of the internet.<\/p>\r\n\"\"\r\n\r\n \r\n\r\n2. Information security aspects<\/strong>\r\n\r\n \r\n

\u201cInformation security is the practice of defending information from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. It is a general term that can be used regardless of the form the data may take (electronic, physical, etc...)\u201d <\/em>(Wikipedia)<\/p>\r\n \r\n

Many organizations realize that one of their most valuable assets is their data, because without data, an organization loses its record of transactions and\/or its ability to deliver value to its customers. Protecting data in motion and data at rest are both critical aspects of information security. An effective information security program is essential to the protection of the integrity and value of the organization\u2019s data.<\/span><\/p>\r\n \r\n

Two major aspects of information security are:<\/span><\/p>\r\n\r\n