security

3-Security:
We all know why computers are taking over from human processors. They are much cheaper in terms of their cost/performance, can handle large volumes of transactions at great speed, do not make mistakes, are not members of workers’ unions and do not take holidays or sick leave. In the early 1980’s the computer was still an object of some mystery, hidden in large buildings and operated by specialist personnel. Today the computer is everywhere: in every office and many homes. However, computers also offer new chances for fraudulent and illegal activities.

Some of the issues that are addressed in this lecture include:
1. Security within the organization: fraud and access control.
2. Security beyond the organization: hackers and viruses.

1- Security Within the Organization:

Security risks within an organization include the processing of fraudulent transactions, unauthorized access to data and program files, and the physical theft or damage of equipment.

1.1- Fraud:
Computer fraud is increasing at a shocking rate. Fraud can be defined as the operation of the records of an organization to hide an illegal act (normally the theft of funds or other assets). The most common fraud tactics are:
• Entering false transactions. No special technical knowledge is required and the employee relies on the fact that management supervision of the process in weak.

• Modification of computer files. Normally requires a little more technical expertise as this would involve, for example, the increase or reduction of amounts held on the master file, which cannot be changed within the application (such as a payment).

• Unauthorized changes to programs. This type of fraud is usually limited to staff with programming expertise.