11th Computer Science

Unit V COMPUTER ETHICS AND CYBER SECURITY PHISHING CYBER CRIMES VIRUSES PIRACY HACKING PHARMING IDENTITY THEFTS ONLINE FINANCIAL TRANSACTIONS Figure . Types of cyber – crimes ETHICS Ethics means “What is wrong and What is Right”. It is a set of moral principles that rule the behavior of individuals who use computers. An individual gains knowledge to follow the right behavior, using morals that are also known as ethics.

Morals refer to the generally accepted standards of right and wrong in the society. Similarly, in cyber- world, there are certain standards such as • Do not use pirated software • Do not use unauthorized user accounts • Do not steal others’ passwords • Do not hack The core issues in computer ethics are based on the scenarios arising from the use of internet such as privacy, publication of copyrighted content, unauthorized distribution of digital content and user interaction with web sites, software and related services. COMPUTER ETHICS With the help of internet, world has now become a global village. Internet has been proven to be a boon to individuals as well as various organizations and businesses.

e-Commerce is becoming very popular among businesses as it helps them to reach a wide range of customers faster than any other means. Computer ethics deals with the procedures, values and practices that govern the process of consuming computer technology and its related disciplines without damaging or violating the moral values and beliefs of any individual, organization or entity. GUIDELINES OF ETHICS Generally, the following guidelines should be observed by computer users: . Honesty: Users should be truthful while using the internet.

. Confidentiality: Users should not share any important information with unauthorized people. . Respect: Each user should respect the privacy of other users.

. Professionalism: Each user should maintain professional conduct. . Obey The Law: Users should strictly obey the cyber law in computer usage.

. Responsibility: Each user should take ownership and responsibility for their actions Ethics is a set of moral principles that govern the behavior of an individual in a society, and Computer ethics is set of moral principles that regulate the use of computers by users. . ETHICAL ISSUES An Ethical issue is a problem or issue that requires a person or organization to choose between alternatives that must be evaluated as right (ethical) or wrong (unethical).

These issues must be addressed and resolved to have a positive influence in society. Some of the common ethical issues are listed below: • Cyber crime • Software Piracy • Unauthorized Access • Hacking • Use of computers to commit fraud • Sabotage in the form of viruses • Making false claims using computers CYBER CRIME Cybercrime is an intellectual, white-collar crime. Those who commit such crimes generally manipulate the computer system in an intelligent manner. For example – illegal money transfer via internet.

Examples of some Computer crimes and their functions are listed below in Table . : Table . Computer Crime Crime Function Cyber Terrorism Hacking, threats, and blackmailing towards a business or a person. Cyber stalking Harassing through online.

Malware Malicious programs that can perform a variety of functions including stealing, encrypting or deleting sensitive data, altering or hijacking core computing functions and monitoring user’s computer activity without their permission. Denial of service attack Overloading a system with fake requests so that it cannot serve normal legitimate requests. Fraud Manipulating data, for example changing the banking records to transfer money to an unauthorized account. Harvesting A person or program collects login and password information from a legitimate user to illegally gain access to others’ account(s).

Identity theft It is a crime where the criminals impersonate individuals, usually for financial gain. Intellectual property theft Stealing practical or conceptual information developed by another person or company. Salami slicing Stealing tiny amounts of money from each transaction. Scam Tricking people into believing something that is not true.

Spam Distribute unwanted e-mail to a large number ofinternet users. Spoofing It is a malicious practice in which communication is send from unknown source disguised as a source known to the receiver. SOFTWARE PIRACY Software Piracy is about the copyright violation of software created originally by an individual or an institution. It includes stealing of codes / programs and other information illegally and creating duplicate copies by unauthorized means and utilizing this data either for one’s own benefit or for commercial profit.

In simple words,Software Piracy is “unauthorized copying of software”. Figure . shows a diagrammatical representation of software piracy. SOFTWARE PIRACY Duplicating and selling copyrighted programs D o w n l o a d i n g software illegally through network Figure .

- Diagrammatic representation of Software piracy An entirely different approach to software piracy is called Shareware , this acknowledges the futility of trying to stop people from copying software and instead relies on people’s honesty. Shareware publishers encourage users to give copies of programs to friends and colleagues but ask everyone who uses that program regularly to pay a registration fee to the program’s author directly. Commercial programs that are made available to the public illegally are often called Warez . UNAUTHORIZED ACCESS Unauthorized access is when someone gains access to a website, program, server, service, or other system by breaking into a legitimate user account.

For example, if someone tries guessing a password or username for an account that was not theirs until they gained access, it is considered an unauthorized access. To prevent unauthorized access, Firewalls, Intrusion Detection Systems (IDS), Virus and Content Scanners, Patches and Hot fixes are used. HACKING Hacking is intruding into a computer system to steal personal data without the owner’s permission or knowledge (like to steal a password). It is also gaining unauthorized access to a computer system, and altering its contents.

It may be done in pursuit of a criminal activity or it may be a hobby. Hacking may be harmless if the hacker is only enjoying the challenge of breaking systems’ defenses, but such ethical hacking should be practiced only as controlled experiments. Figure . shows a diagrammatic representation of Hacking.

The act of gaining illegal access to a computer Identity theft or gaining personal information Firewalls, passwords and user Id’s , anti hacking software HACKING Leads to Protected by Figure . Diagramatic representation of Hacking CRACKING Cracking is where someone edits a program source so that the code can be exploited or modified. A cracker (also called a black hat or dark side hacker) is a malicious or criminal hacker. “Cracking” means trying to get into computer systems in order to steal, corrupt, or illegitimately view data.

A cracker is someone who breaks into someone else's computer system, often on a network, bypassing passwords or licenses in computer programs. They may send official e-mail requesting some sensitive information. It may look like a legitimate e-mail from bank or other official institution. .

Cyber Security and Threats Cyber attacks are launched primarily for causing significant damage to a computer system or for stealing important information from an individual or from an organization. Cyber security is a collection of various technologies, processes and measures that reduces the risk of cyber attacks and protects organizations and individuals from computer based threats. TYPES OF CYBER ATTACKS Malware is a type of software designed through which the criminals gain illegal access to software and cause damage. Various types of cyber-attacks and their functions are given in Table .

. Table . – Cyber Attacks and Functions Cyber Security Threats In recent years, most of the individuals and enterprises are facing problems due to the weaknesses inherent in security systems and compromised organizational infrastructures. Different types of Cyber Security Threats are categorized as below: Phishing Phishing is a type of computer crime used to attack, steal user data, including login name, password and credit card numbers.

It occurs when an attacker targets a victim into opening an e-mail or an instant text message. The attacker uses phishing to distribute malicious links or attachments that can perform a variety of functions, including the extraction of sensitive login credentials from victims. PHISHING This can lead to fraud or identity theft Users should always be cautious when opening emails or attachments Figure . Diagrammatic representation of Phishing Pharming Pharming is a scamming practice in which malicious code is installed on a personal computer or server, misdirecting users to fraudulent web sites without their knowledge or permission.

Pharming has been called " phishing without a trap ”. It is another way hackers attempt to manipulate users on the Internet. It is a cyber-attack intended to redirect a website's traffic to a fake site. PHARMING This can lead to fraud or identity theft Users should always be cautious when redirected to a fake site.

Figure . Diagrammatic representation of Pharming Man In The Middle (MITM) Man-in-the-middle attack (MITM; also Janus attack) is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other. Example: Suppose Alice wishes to communicate with Bob. Meanwhile, Mallory wishes to intercept the conversation to overhear and optionally to deliver a false message to Bob.

Alice Mallory Bob Figure . - An illustration of the Man-In-The-Middle attack Cookies A cookie (also called HTTP cookie, web cookie, Internet cookie, browser cookie, or simply cookie) is a small piece of data sent from a website and stored on the user's computer memory (Hard drive) by the user's web browser while the user is browsing internet. Cookies were designed to be a reliable mechanism for websites to remember stateful information (such as items added in the shopping cart in an online store) or to record the user's browsing activity (including clicking particular buttons, logging in etc.). They can also be used to remember arbitrary pieces of information that the user previously entered into form fields such as names, addresses, passwords, and credit card numbers.

From the security point of view, if cookie data is not encrypted, any anonymous user (hacker) can access the cookie information and misuse it. Web sites typically use cookies for the following reasons: • To collect demographic information about who has visited the Web site. • Sites often use this information to track how often visitors come to the site and how long they remain on the site. • It helps to personalize the user's experience on the Web site.

• Cookies can help store personal information about users so that when a usersubsequently returns to the site, a more personalized experience is provided. Restricted Area Trusted Users LAN R e q u e s t Permitted Request Denied Connection to internet (Point of vulnerability) Internet Firewall servers as a filter Unrestricted Area If you ever returned to a site and have seen your name mysteriously appear on the screen, it is because on a previous visit, you gave your name to the site and it was stored in a cookie. A good example of this is the way some online shopping sites will make recommendations to users based on their previous purchases. It helps to monitor advertisements.

Cookies do not act maliciously on computer system. They are merely text files that can be deleted at any time. Cookies cannot be used to spread viruses and they cannot access your hard drive. However, any personal information that you provide to a Web site, including credit card information, will most likely be stored in a cookie unless the cookie feature is explicitly turned off in your browser.

This is the way in which cookies threaten privacy. Firewall and Proxy Servers A firewall is a computer network security based system that monitors and controls incoming and outgoing network traffic based on predefined security rules. A firewall commonly establishes a block between a trusted internal computer network and entrusted computer outside the network. Figure .

shows the working of firewall server. A proxy server acts as an intermediary between the end users and a web server. A client connects to the proxy server, requesting some service, such as a file, connection, web page, or other resources available from a different server. The proxy server examines the request, checks authenticity and grants the request based on that.

Proxy servers typically keep the frequently visited site addresses in its cache which leads to improved response time. Figure . shows the working of a proxy server. Figure .

Firewall Server Users computer web browser sends request web browser request forwarded web servers send back response to proxy server web server response is filtered Proxy server web server Figure . Working of Proxy server Encryption and Decryption Encryption and decryption are processes that ensure confidentiality that only authorized persons can access the information. Encryption is the process of translating the plain text data (plaintext) into random and mangled data (called cipher-text). Decryption is the reverse process of converting the cipher-text back to plaintext.Encryption and decryption are done by cryptography.

In cryptography a key is a piece of information (parameter) that determines the functional output of a cryptographic algorithm. Figure . shows the encryption and decryption process. Basic Encryption & Decryption decryption encryption Plain text Plain text Cipher text Figure .

Encryption and Decryption Encryption has been used by militaries and governments to facilitate secret communication. It is now commonly used in protecting information within many kinds of civilian systems. It is also used to protect data in communication system, for example data being transferred via networks (e.g. the Internet, ecommerce), mobile telephones, wireless microphones, wireless intercom systems, Bluetooth devices and bank automatic teller machines.

There have been numerous reports of data in communication being intercepted in recent years. Data should also be encrypted when transmitted across networks in order to protect against the network traffic by unauthorized users. . INTRODUCTION TO INFORMATION TECHNOLOGY ACT In the 21st century, Computer, Internet and ICT or e-revolution has changed the life style of the people.

Today paper based communication has been substituted by e-communication. Accordingly we have new terminologies like cyber world, e-transaction, e-banking, e-return and e-contracts. Apart from positive side of e-revolution there is also negative side of computer, that is, the internet and ICT in the hands of criminals which has become a weapon of offence. Accordingly a new panel of members emerged to tackle the problems of cyber crimes in cyber space i.e.

Cyber Law or Cyber Space Law or Information Technology Law or Internet Law. In India Cyber law and IT Act , modified in are being articulated to prevent computer crimes. IT Act is an act to provide legal recognition for transactions carried out by means of ElectronicData Interchange(EDI) and other means of electronic communication. It is the primary law in India dealing with cybercrime and electronic commerce(e-Commerce).

e-Commerce is electronic data exchange or electronic filing of information. “Cyber law or Internet law is a term that encapsulates the legal issues related to use of the Internet. PREVENTION % of cyber crime remains unsolved. To protect the information the following points are to be noted: • Complex password setting can make your surfing secured.

• When the internet is not in use, disconnect it. • Do NOT open spam mail or emails that have an unfamiliar sender. • When using anti-virus software, keep it up-to-date. • Awareness is the key to security.

• Information security is the immune system in the body of business. • A check that does not bounce is called the Security Check. Do it every day before you leave! • Do Your Part - Be Security Smart !!!

• Don’t be Quick to Click… be wary when you shop online. • Restart is Smart job • Passwords are like toothbrushes. They are best when new and should never be shared. • When you and your system part away, your system should be first off for the day.

• Your mind is a storage room of information, keep the door locked. • _ a _ _word is not a PaSSword without Protect, Save and Secure! • Link Link stop neglect….Think Think before connect….. Unit V COMPUTER ETHICS AND CYBER SECURITY As per study, by , % of people in India will access internet using Tamil and it will be in the top usage of Internet in India.

These statistical data will be useful to improve internet services in Tamil. . Search Engines in Tamil The “Search Engines” are used to search any information from the cyber space. Although there are many search engines, but only a few of them are frequently in use.

In the top ten search engines, Google, Bing and Yahoo take first three places respectively. Google and Bing provide searching facilities in Tamil, which means you can search everything through Tamil. The Google search engine gives you an inbuilt Tamil virtual keyboard. உள்ளீட்டுக் கருவிகள் Figure .

(a) Google Search Engine (India) உள் ளீ ட்டுக் கருவிகள் Figure . (b) Google Search Engine (Singapore) Figure . Searching in Tamil . e – Governance: Getting Government services through internet is known as e-Governance.

Govt. of Tamilnadu has been giving its services through Internet. One can communicate with Govt. of Tamilnadu from any corner of the World.

One can get important announcements, government orders, and government welfare schemes from the web portal of Govt. of. Tamilnadu. Figure .

Official Website of Govt. of Tamilnadu E-Governance through Tamil Web Address Official Website of Govt. of Tamilnadu Department of Agricultural Engineering Department of Environment Directorate of Govt. Examinations Tamilnadu Health Department Tamilnadu Micro, Small and Medium Enterprises Department Rural Development and Panchayat Raj Department Backward, Most Backward and Minorities Welfare Department Tamilnadu Forest Department Hindu Religious and Charitable Endowments Department.

Tamil Nadu Public Service Commission (TNPSC) html Official Website of Govt. of Srilanka Outside India, Government of Srilanka provides all their services through the official website in Tamil. . e-Library E-Libraries are portal or website of collection of e-books.

Tamil e-Library services provide thousands of Tamil Books as ebooks mostly at free of cost. It is the most useful service to Tamil people who live far away from their home land. Tamil e-Library Website address Tamilnadu School Education and Teacher Education Training Textbooks and Resource Books Tamil Virtual Academy Connemara Public Library /index.html Tamil Digital Library Chennai Library Thamizhagam parithi.html Project Madurai html Old Books and Manuscripts ebook/ebook.html Noolaham Anna Centenary Libraray . Tamil Typing and Interface software Tamil is mostly used to type documents in word processors and search information on the internet.

Typing Tamil using Tamil interface software is a familiar one among the different methods of typing. This is the simplest method of typing Tamil in both Computer and Smart phones. . .

Familiar Tamil Keyboard Interface: • NHM Writer, E-Kalappai and Lippikar – are familiar Tamil keyboard interfaces software that is used for Tamil typing which works on Tamil Unicode, using phonetics. • Sellinam and Ponmadal – are familiar Tamil keyboard layouts that works on Android operating system in Smart phone using phonetics. Figure . eKalappai Opening screen .

Tamil Office Automation Applications Famous Office automation software like Microsoft Office, Open Office etc., provides complete Tamil interface facility. These softwares are downloadable and installed in your computer. After installation, your office automation software environment will completely change to Tamil. Menu bars, names of icons, dialog boxes will be shown in Tamil.

Moreover, you can save files with Tamil names and create folders with Tamil names. Figure . Libra Office Writer Environments in Tamil Apart from that Tamil Libra Office, Tamil Open Office, Azhagi Unicode Editor, Ponmozhi, Menthamiz, Kamban, Vani are office automation software working exclusively for Tamil. You can use these applications to work completely in Tamil.

. Tamil Translation Applications Thamizpori ( தமிழ்பொறி ) is a Tamil tranlation application having more than 30000 Tamil words equalent to English words. Using this application, we can translate small english sentences into Tamil. Google also gives an online translation facility, using this online facility we can translate from Tamil to any other language and vice versa.

. Tamil Programming Language Programming languages to develop software in computers and smart phones are available only in English. Now, efforts are taken to develop programming languages in Tamil. Based on Python programming language, the first Tamil programming language “Ezhil” ( எழில் ) is designed.

With the help of this programming language, you can write simple programs in Tamil. . Tamil Information Interchange Coding Systems TSCII (Tamil Script Code for Information Interchange) Computers handle data and information as binary system. Every data should be converted into binary when it is fed into a computer system.

You have learnt about all these things in the first unit of this text book. Computers use ASCII encoding system to handle data and information. The ASCII encoding system is applicable only for handling English language. Therefore, TSCII (Tamil Script Code for Information Interchange) is the first coding system to handle our Tamil language in an analysis of an encoding scheme that is easily handled in electronic devices, including non-English computers.

This encoding scheme was registered in IANA (Internet Assigned Numbers Authority) a unit of ICANN. ISCII (Indian Script Code for Information Interchange) This is one of the encoding schemes specially designed for Indian languages including Tamil. It was unified with Unicode. Unicode: Unicode is an encoding system, designed to handle various world languages, including Tamil.

Its first version . . was introduced in October . When Unicode was introduced it could handle nearly languages including Tamil.

Among the various encoding scheme, Unicode is the best suitable to handle Tamil. . Tamil Operating System An operating system is needed to access electronic systems such as computer and smart phone. Microsoft Windows is very popular operating system for personal computers.

Linux is another popular open source operating system. Operating systems are used to access a computer easily. An operating system should be easy to work and its environment should be in an understandable form. Thus, all operating systems used in computers and smart phones are offered in Tamil environment.