Chapter 6: Security, privacy, and data integrity

Prevents accidental or malicious data loss

Prevents unauthorized access to data

Ensures data is accurate and up to date; validation andverification

A method of checking if the data entered is valid but not accurate

- Range Check
- Format Check
- Length Check
- Prescence Check
- Existence Check
- Check digit

A number value must be within a certain range
e.g, 1-100

Data must match a given format
e.g, DD/MM/YY

The length of the data value
i.e, the number of characters is fixed

Data must not be left empty

Data must exist
i.e. if you are inputting a file name that file needs to exist

An arithmetic operation carried out on the given input and the data must match the answer
i.e. international standard book number (ISBN)

A method of checking that data is the same as the original during entry and transfer

- Entry
o Visual check / Proofreading
o Double entry
- Transfer
o Checksum
o Parity Check

Data must be manually compared by the user to ensure it is correct

Data must be entered twice and then both inputs are compared to each othe

Data entered passes through an algorithm to produce the checksum, the checksum is then sent along with the data. The checksum is recalculated and compared

Each row and column have even/odd parity, an even/odd number of 1 bit, depending on what is chosen. An additional parity byte is sent to ensure there is parity horizontally and vertically. The intersection of the row and column where the parity is broken is the error bit. Parity check fails when multiple bits transmitted incorrectly as they might cancel out.

- User Accounts
- Authentication
- Digital Signature
- Firewall / Proxy
- Anti-malware
- Encryption

To specify different permissions for the users, such as read and write access so that unauthorized actions cannot be carried out.
Each user has an account with a password and username which helps prevent access to the system without a valid username and password

Authentication means to determine that someone is who they claim to be
- Through using a strong password with a unique combination of letters, numbers and
symbols makes it hard to crack.
- Additionally using biometric data such as face id or fingerprint makes it even more difficult.
- 2 Factor/stepverification using an external device can help make sure no one access your account while you are away.

Encrypted data that's electronically attached to files to verify it is from a trusted source
- Digital signature is created by putting the content through a hashing algorithm producing a digest by
-- The digest is encrypted with the sender’s private key
--- Can only be decrypted by using their public key

Monitors incoming and outgoing traffic against a given criteria and will block anything suspicious that does not meet the requirement. It maintains blacklist of Ip address. It also has log of all traffic

Prevents requests being sent to a server

Scans the files stored on the system and files that newly enter the system for malicious code. It does this on a regular schedule. If a file is found it can be quarantined and deleted

The process of converting a given input into an unreadable format using a key. A decryption key is needed to unscramble the data

- Malware
- Spyware
- Hackers
- Phishing
- Pharming

Malicious code that self-replicates itself with the intention of harming a computer system by corrupting data

Malicious software installed on the victim’s device that records keypresses and relays them to a third party without the user’s knowledge

Unauthorized access to the victim’s device with malicious intent such as to steal sensitive information

The user is redirected to a fake link usually through email that attempts to gain sensitive personal information

The legal right to ownership and protection of intellectual property; allows enforcement of legal action against those who misuse it and restrict its usage

A group of people entrusted with maintaining operations of a legitimate occupational business.

- Provides ethical guidelines; clients know the standards that are applied; does not have to decide what's ethical since it's written down
- Provide help and support such as legal advice when needed
- Provide training courses to ensure the employee’s skills are always polished

(starts with 'software engineers shall')
Public: ' ' act consistently with the public interest
Client/Employer: ' ' act in a manner that is in the best interests of their client and employer consistent with the public interest
Product: ' ' ensure that their products and related modifications meet the highest professional standards possible
Judgement: ' 'maintain integrity and independence in their professional judgment
Management: ' '-ing managers and leaders shall subscribe to and promote an ethical approach to the management of software development and maintenance
Profession: ' ' advance the integrity and reputation of the profession consistent with the public interest
Colleagues: ' ' be fair to and supportive of their colleagues
Self: ' ' participate in lifelong learning regarding the practice of their profession and shall promote an ethical approach to the practice of the profession