Computer security

“ Computer security, Parker informs us mournfully, is a nasty topic, and we wish we didn't have to have it.... The security expert, armed with method and logic, must think—imagine—everything that the adversary might do before the adversary might actually do it. It is as if the criminal's dark brain were an extensive subprogram within the shining cranium of Donn Parker. ”

“ While the common rabble of other hackers were thumping their heads against walls in brute-force attacks on random machines, these hackers spent their time hunting for strategic pressure points—the Achilles' heels of the computer security community. ”

“ According to computer security experts there are two ways to deal with the present virus crisis. The best way to make sure that an active security system is in place in your computer. Recommenda- tions vary, but it is generally agreed by most experts that security, especially in the highly susceptible desktop and laptop personal computers, should be hardware based. Security in soft- ware is viewed to be ineffective against well designed viruses or other offensive software mechanisms. ”

“ For consumers, securing a computer is a matter of routine maintenance and caution. Effective passwords, firewalls, and up-to-date antivirus software can help protect computers, and the personal or business information we store on them, from those who would damage a network operation or steal personal information to commit a crime. By practicing effective information security measures, all citizens can contribute to the protection of our national information infrastructure.
To assist consumers, public and private entities have joined forces to highlight the importance of information security. ”

“ It is meant specifically for you, the editor, not the public.
I am a hacker. That is to say, I enjoy playing with computers — working with, learning about, and writing clever computer programs. I am not a cracker; I don't make a practice of breaking computer security.
There's nothing shameful about the hacking I do. But when I tell people I am a hacker, people think I'm admitting something naughty — because newspapers such as yours misuse the word "hacker", giving the impression that it means "security breaker" and nothing else. You are giving hackers a bad name. ”

“ Cooperation on Cybersecurity Matters The Parties recognise the importance of:
(a) building the capabilities of their national entities responsible for computer security incident response; and (b) using existing collaboration mechanisms to cooperate to identify and mitigate malicious intrusions or dissemination of malicious code that affect the electronic networks of the Parties. ”

“ A combination usually would be much better.”
▪ Don’t get hung up on protecting your dial-up computer with just hardware or just software—use both. “Black boxes can help keep the wrong people from breaking in. But you also need good security software to control how deeply even authorized people can get into your computer. You want some people—like customers—to have only partial access to the goodies inside your system.”
▪ Watch what you throw away. “Some hackers can log onto your dial-up computer after first poking through your trash—for printouts with passwords and similar material.” ”

“ A store can only sell you a computer, not common sense. Nor can this chapter impart it to you. It can, however, pound away at the elements of data security—people, policies, hardware, and software. They go together, these four. And so do the criminal and noncriminal parts of data security. If you’ve lost control of your computer files and don’t know what’s normal, you’ll hardly notice the abnormal. You’ll never thwart a computerized embezzler, for instance, with a gun. You will with good software. ”

“ It acknowledges the present clash between security and ease of use of computer systems. “If a computer could be designed with various levels of security as options, computer security might well be a marketable commodity,” said a statement from CBEMA to a trade magazine. In recent years there has been much more research 179in this area, and when 32-bit micros become the norm, it will be much easier to beef up security.
When crimes do happen on existing systems, they’re often covered up by top executives panicky over going to court or jail. ”

“ Hackers would always find out about bugs one way or another and the best way to keep them out of your system was to secure it properly in the first place. They wanted full disclosure.
In the other corner, the hard-line, command-and-control computer security types argued that posting an announcement to Zardoz posed the gravest of security risks. What if Zardoz fell into the wrong hands? Why, any sixteen-year-old hacker would have step-by-step directions showing how to break into thousands of individual computers! ”

“ Our Nation's security requires classified information to be shared immediately with authorized users around the world but also requires sophisticated and vigilant means to ensure it is shared securely. Computer networks have individual and common vulnerabilities that require coordinated decisions on risk management. ”

“ According to a number of studies, however, employees represent the largest threat, and indeed computer crime has often been referred to as an insider crime. One study estimated that 90 per cent of economic computer crimes were committed by employees of the victimized companies. A recent survey in North America and Europe indicated that 73 per cent of the risk to computer security was attributable to internal sources and only 23 per cent to external criminal activity. ”

“ Should there be anyone carrying out whatever act to cause a computer system to fail to function in line with given directions or to function erroneously against the given directions, or wrongfully employing whatever method to obtain knowledge about, modify, or destroy another person's data in a computer system, or using a computer system to publish false or indecent computer data, then damage would ensue, affecting the economy, society, and security of the State, as well as public peace and good morals. ”

“ Even a small glitch in the operation of these systems con put human lives in danger. Society's dependence on computer systems, therefore, has a profound human dimension. The rapid transnational expansion of large-scale computer networks and the ability to access many systems through regular telephone lines increases the vulnerability of these systems and the opportunity for misuse or criminal activity. The consequences of computer crime may have serious economic costs as well as serious costs in terms of human security.
This work is excerpted from an official document of the United Nations. ”

“ Owing to the greater complexity of certain computer routines and augmented security measures, it is becoming increasingly unlikely that any one person will possess all the information needed to use a computer system for criminal purposes. Organized computer criminal groups, composed of members from all over the world, are beginning to emerge. ”

“ Could he easily do this through his own machine—or yours? You might want to consult a cryptography expert to learn how much of a challenge this particular program would be. You’d be surprised. You may see the manufacturer’s claims instantly deflated.
2. How compatible is the program with your computer? If security is so important, choose the protective software first, then the hardware—assuming, of course, that it will run your applications programs.
3. Is the security program easy to use? If it’s too hard, it’ll be self-defeating. ”

“ There are far too many who, given any opportunity, will bypass those security measures, some for the sheer joy of doing it, some for innocuous reasons, and others for more malevolent purposes. Given the virtually instantaneous and worldwide dissemination widely available via the Internet, the only rational assumption is that once a computer program capable of bypassing such an access control system is disseminated, it will be used. ”

“ The National Strategy to Secure Cyberspace also offers guidance for the full range of computer users on information security. By working together, we can help consumers and businesses understand how information security affects their decisions at home and in the marketplace. ”

“ You may break software controls that force your phone to connect to only one network. You may also buy an iPhone from one phone company and then move it to another company’s network. You may break software controls on computer games to test them for security flaws. You may break through software controls when the dongle (a hardware security device needed to operate some programs) malfunctions, is damaged, or becomes obsolete. You may break through software controls to enable read-aloud or screen readers for e-books when all authorized copies do not permit these features. ”

“ The potential for computer crime is as vast and extensive as the interconnections of worldwide telecommunications networks. All regions of the world, both developed and developing countries, must become involved in order to stifle this new form of criminality. Computer technologies will be increasingly important for developing countries attempting to achieve economic sufficiency. The implementation of security and crime-prevention procedures should be an integral aspect of technological progress in these countries, as should their cooperation in international computer-crime matters. ”

“ Vulnerability of electronic data-processing media 55. It is sometimes inferred that a degree of security is provided by the inability of humans to translate machine-readable data in the form of punched holes in cards or tape, magnetic states on tapes, drums and disks, and electrical states in processing or transmission circuits. In practice, not only can such computerized information codes be readily interpreted by most technical personnel, but the data obscurity created has the additional negative effect of creating identification and accounting problems. ”

“ A. Security in the electronic data-processing environment 186. Society increasingly relies on automated systems to carry out many essential functions in day-to-day life. If these systems are to be depended upon, it is essential that the persons responsible for their operation recognize the vulnerabilities to which they are subject and take steps to implement appropriate safeguards. ”

“ Encouraging management and senior executives to commit their organizations to security and crime prevention; Incorporating and promoting the use of security measures in the information technology industry; Developing and promoting computer ethics in all sectors of society, but especially in educational institutions and professional societies; Developing professional standards in the data-processing industry, including the option of disciplinary measures; Educating the public about the prevalence of computer crime and the need to promote computer ethics, standards and security measures ”

“ A very dry group of techno-wizards and techno-managers and tech- no-bureaucrats assemble for several days, twice a year, to dis- cuss the latest developments in biometric identifications tech- niques, neural based cryptographic analysis, exponential factor- ing in public key management, the subtleties of discretionary access control and formalization of verification models.
The National Computer Security Center is a Department of Defense working group substantially managed by the super secret National Security Agency. ”

“ The defensive readiness of our military was in ques- tion for some time before the Pentagon was satisfied that they had cleansed their computers.
The questions that arise are clearly ones to which there are no satisfying responses. Should 'everyman' have unrestrained access to tools that can obviously be used for offensive and threatening purposes? Is there a level of responsibility associated with computer usage? If so, how is it gauged? Should the businessman be subject to additional regulations to insure security and privacy? ”

“ Security levels, costs, measures, practices and procedures should be appropriate and proportionate to the value of and degree of reliance on the information system and to be severity, probability and extent of potential harm, as the requirements for security vary depending on the information system. ”

“ All the major search sites are still trying to be the "Swiss army knife" of search engines. Google, Yahoo, Live Search, Ask, and Exalead all competed hotly with each other to roll out new, better, faster, fancier, more powerful tools to do everything from search the contents of your computer in a heartbeat to letting you "fly" around the world with a bird's (or satellite's) eye view of the planet. ”

“ Safeguards should not only be cost-effective but should also provide a judicious balance between those designed to prevent threats, those to detect threats occurrences or security infractions and those to respond to the threats that inevitably occur. Risk analysis is a team function that must involve managers from user, application, systems and operations areas in the establishment of priorities and the allocation of funds for security measures. ”

“ It is not surprising that such systems are not fully understood by anyone, including the designers, or that they are often unreliable. It is only possible to prove the presence of errors, not their absence, and any system error can result in down time or a potential security fault. ”

“ G. International security of information systems 234. Lack of international coordination and cooperation can have detrimental effects on national and international economies, on trade and on participation in social, cultural and politic life. International understanding of, and domestic implementation of measures that are required to enhance the security of information systems and facilitate the international exchange of data and commerce are important. Confidence that countries are abiding by security principles promotes confidence in international trade and commerce. ”