Saturday, 19 May 2012
Home arrow Security information arrow Computers: crimes, attributes of vulnerability and a measure of protection
Security software
Anti spam tools
Anti spyware tools
Antivirus
Backup
Encryption
Firewall
Free software
Passwords managers
Popup ad blockers
Other
Other
Submit software
Security news
Security information
Contact us


RSS
Security software
Security software


Sell software online
Affiliate Programs
Hand guns



Computers: crimes, attributes of vulnerability and a measure of protection
Tuesday, 25 October 2005

Information age has led to drama changes in a way of performance of the duties for the big number of trades. Now the no technical expert of an average level can perform work, which was done earlier by the highly skilled programmer. The employee has at the order so much the exact and operative information, how many never had.

But use of computers and the automated technology leads to occurrence of some problems for a management of the organization. The computers frequently incorporated into networks, can give access to enormous amount of the diversified data. Therefore people worry about safety of the information and presence of the risks connected to automation and granting of much more access to confidential, personal or other critical data. All increases number of computer crimes that can lead finally to undermining of economy. And consequently it should be clear, that the information is a resource which should be protected.

The responsibility for protection of the information lays on the lowest part of a management. But also someone should carry out the general management of this activity, therefore in the organization there should be a person in the top part of the management, responsible maintenance of serviceability of information systems.

And as automation has led to to that now operations with computer facilities are carried out by simple employees of the organization, instead of specially prepared technicians, it is necessary, that end users knew about the responsibility for protection of the information.

The purpose of this document is to give bases of computer safety for the lowest control link, which is for chiefs of departments, heads of groups, etc.

At a robbery of bank of loss on the average make 19 thousand dollars, and at a computer crime - 560 thousand dollars

The number of computer crimes grows - scales of computer abusing also increase. According to experts the USA, damage from computer crimes increases for 35 percent one year and makes about 3.5 billion dollars. One of the reasons is the sum of money received as a result of a crime: while the damage from an average computer crime makes 560 thousand dollars, at a robbery of bank - only 19 thousand dollars.

Chances to be caught at the computer criminal is smaller, than the robber of bank - and even at capture at him(it) has less than chances to get in prison. 1 percent(interest) of computer crimes is found out on the average. And the probability of that for computer swindle the criminal will get in prison, it is less than 10 percent.

Deliberate computer crimes make an appreciable part of crimes. But and mistakes it is even more abusing computers. As one expert was expressed, " we lose because of mistakes of more money, than could steal ". These losses emphasize importance and gravity of the losses connected to computers.

Principal cause of presence of the losses connected to computers, the insufficient erudition is in the field of safety. Only presence of some knowledge in the field of safety can stop incidents and mistakes, to provide effective application of measures of protection, to prevent a crime or in due time to find out suspected. The awareness of the end user on security measures provides four levels of protection of computer and information resources:

MEASURES OF PROTECTION: FOUR LEVELS OF PROTECTION

Prevention - only the authorized personnel has access to the information and technology

Detection - is provided early detection of crimes and abusing even if mechanisms of protection have been bypassed

Restriction - decreases the size of losses if the crime all the same has taken place despite of measures on its prevention and detection.

Restoration - is provided effective restoration of the information at presence of the documentary and checked up plans on restoration

Yesterday the control over technology of work was care of technical managers. Today the control over the information became a duty of each nontechnical end user. The control over the information demands new knowledge and skills for group of nontechnical employees. The good control over the information demands understanding of opportunities of fulfillment of computer crimes and abusing that it was possible to undertake in further counter-measures against them.

When computers for the first time have appeared, they were accessible only to a small number of people that were able to use them. Usually they were located in the special rooms removed territorially from rooms where employees worked. Today all has changed. Computer terminals and desktop computers are used everywhere. The computer equipment became friendly to the user, therefore many people can learn quickly and easily to how it to use.

The number of employees in the organization, having access to the computer equipment and information technology, constantly grows. Access to the information any more is not limited only to a narrow circle of persons from the top management of the organization. This process has led to that there was " a democratization of a crime ". The more people got access to information technology and the computer equipment, the arose opportunities for fulfillment of computer crimes more.

It is difficult to generalize, but now the computer criminal can be...

* The end user, not the technical employee and not the hacker

* The one who is not on a supervising post

* Who does not have previous convictions

* The clever, talented employee

* The one who works much

* The one who does not understand computers

* The one whom you would suspect in last turn

* The one whom you would take for work




 
< Prev   Next >
© 2004-2007 Daita.org