1
Chapter No. 6
Computer Security and Ethics
1. Introduction
Definition
Computer security is the practice of protecting computers, networks, and data from
unauthorized access, attacks, or damage.
Computer ethics involves using computers responsibly and legally.
2. Common Computer Security Threats
2.1 Malware
Definition
Malware is software designed to damage, disrupt, or gain unauthorized access to a computer.
Types
Virus
Worm
Trojan
Example
A virus that deletes files from your computer.
2.2 Phishing Attacks
Definition
Phishing is a trick to steal personal information by pretending to be a trustworthy source.
Example
Fake email from “bank” asking for your password.
Composed by: Engr. Sajjad Ali HAMZA GROUP OF COLLEGES
2
2.3 Ransomware
Definition
Ransomware is malware that locks files until a ransom is paid.
Example
A message saying “Pay Rs.100 to unlock your files.”
2.4 Social Engineering
Definition
Tricking people into giving confidential information.
Example
Someone calling and pretending to be IT support to get your password.
2.5 Password Attacks
Definition
Attempts to guess or steal passwords.
Example
Brute force attack trying all possible passwords.
2.6 Denial-of-Service (DoS) Attacks
Definition
Flooding a website or network to make it unavailable.
Example
Website crashes due to excessive fake traffic.
Composed by: Engr. Sajjad Ali HAMZA GROUP OF COLLEGES
3
2.7 Man-in-the-Middle (MitM) Attacks
Definition
Intercepting communication between two parties to steal information.
Example
Stealing login credentials while using public Wi-Fi.
2.8 Unsecured IoT Devices
Definition
Internet of Things (IoT) devices that are not properly secured.
Example
Smart cameras hacked due to weak passwords.
2.9 Physical Security Threats
Definition
Unauthorized access to physical hardware or storage devices.
Example
Someone stealing a laptop or USB drive.
2.10 Supply Chain Attacks
Definition
Attacks that target software or hardware before it reaches the user.
Example
Malware pre-installed in purchased devices.
Composed by: Engr. Sajjad Ali HAMZA GROUP OF COLLEGES
4
2.11 Browser-Based Attacks
Definition
Attacks exploiting web browsers.
Example
Malicious pop-ups or drive-by downloads.
2.12 Wi-Fi Eavesdropping
Definition
Intercepting data sent over unsecured Wi-Fi networks.
Example
Someone capturing your login credentials on public Wi-Fi.
2.13 Credential Theft
Definition
Stealing usernames and passwords to access accounts.
Example
Key logger software capturing login details.
3. Basic Security Measures and Best Practices
3.1 Password Management
Use strong, unique passwords
Change passwords regularly
Example:
Use a combination of letters, numbers, and symbols.
Composed by: Engr. Sajjad Ali HAMZA GROUP OF COLLEGES
5
3.2 Two-Factor Authentication (2FA)
Adds an extra layer of security
Requires password + code sent to mobile/email
3.3 Regular Software Updates
Keep software updated to fix vulnerabilities
3.4 Use of Antivirus and Anti-malware Software
Detects and removes viruses and malware
3.5 Firewalls and Network Security
Firewalls block unauthorized access
Secures networks from external threats
3.6 Secure Wi-Fi Practices
Use strong Wi-Fi passwords
Avoid public Wi-Fi for sensitive transactions
3.7 Regular Data Backups
Save copies of important files
Can be stored on external drives or cloud
3.8 User Account Management
Give users access only to necessary resources
Remove inactive accounts
3.9 Employee Training and Awareness
Educate users about security risks
Encourage safe online practices
Composed by: Engr. Sajjad Ali HAMZA GROUP OF COLLEGES
6
3.10 Secure Web Browsing Habits
Avoid clicking on suspicious links
Use HTTPS websites
3.11 Mobile Device Security
Lock devices with passwords or biometrics
Install updates regularly
3.12 Secure File Sharing
Use encrypted platforms
Avoid sharing sensitive files publicly
3.13 Secure Email Practices
Don’t open attachments from unknown senders
Use email encryption for confidential data
3.14 Secure Cloud Storage
Use cloud services with strong security
Enable 2FA
Encrypt sensitive files before upload
Composed by: Engr. Sajjad Ali HAMZA GROUP OF COLLEGES