Security

Answer the following questions both for transmitting data in the physical woeld and over computer networks:
  1. How do you authenticate a person's identity?
    
    
    
    
    
    
  2. How do you ensure confidentiality, so that only the authorized recipient can read it?
    
    
    
    
    
    
  3. How do you ensure data integrity?
    
    
    
    
    

Privacy

  1. Before 1996, the US governement considered anything stronger than 40-bit encryption a "munition" and its export was illegal. Why was it illegal? Why do you think encryption was made legal?
    
    
    
    
    
    
  2. The following is Duke Information Technology Advisory Committee's policy:

    The purpose of this document is to establish and promote the ethical, legal, and secure use of computing and electronic communications for all members of the University community.

    The University cherishes freedom of expression, the diversity of values and perspectives inherent in an academic institution, the right to acknowledgment, and the value of privacy for all members of the Duke community. At the same time, the University may find it necessary to access and disclose information from computer and network users' accounts to the extent required by law, to uphold contractual obligations or other applicable University policies, or to diagnose and correct technical problems. For this reason, the ultimate privacy of messages and files cannot be ensured. In addition, system failures may lead to loss of data, so users should not assume that their messages and files are secure.

    Neither the University nor its agents restrict the content of material transported across its networks. While the University does not position itself as a censor, it reserves the right to limit access to its networks or to remove material stored or posted on University computers when applicable University policies, contractual obligations, or state or federal laws are violated. Alleged violations will receive the same academic due process as any other alleged violation of University policy, contractual obligations, or state or federal laws.

    Does any part of the policy surprise you? If so, what? Is it possible to both uphold University policies, contractual obligations, and state or federal laws and to not regular monitor the activity and files in users' accounts?

    
    
    
    
    
  3. According to the guidelines listed in the Acpub acceptable use policy:
    Reading others' email is equivalent to going to someone's mailbox on the street and opening their letters.
    Do you agree?
    
    
    
    

    Computer Viruses

    Computer Incident Advisory Capability's Hoax page

    jdbmgr

    Subject: IMPORTANT-VIRUS ALERT!!!
    Date: Thu, 18 Apr 2002 04:01:21 +0000
    
    Hi everybody, I just wanted to let you know you
    should check your computers by following the 
    procedure that's next....I don't remember 
    getting an email with that file attachment, but 
    I found it in my system. Since I found the
    dumb little bear in my computer, I'm sending 
    you the info.
    
    The virus is called jdbgmgr.exe and it transfers
    automatically through Messenger and also through 
    your address book and since I have all of you in
    my address book I have to send everyone this info.
    I'm sorry if this causes any problems.  It 
    certainly wasn't intentional.
    
    The virus isn't detected by McAfee or Norton and it
    remains in the folder for 14 days before activating 
    and harming the system. It can be erased before 
    it eliminates the files in your computer.  To
    do so, follow these steps:
    
      1.- Click on "Start"
      2.- Go to find "files and folders" and write the
          name of jdbgmgr.exe
      3.- Make sure it's looking in "C" drive.
      4.- Click on "Find now"
      5.- If the virus appears (the icon is a little bear
          that has the name of (jdbgmgr.exe) 
          DO NOT OPEN IT FOR ANY REASON
      6.- Right click on it and delete it (it will go to
          the recycle bin)
      7.- Go to the recycle bin and either delete
          everything in the folder, or right click on 
          the little bear and delete.
          
    If you find this virus in your computer, please send
    this message to all the people in your address book 
    before it causes any damage.
      

    And a Spanish Version.

    me llego este mail y pues me parece importante que lo lean y 
    lo lleven a cabo porque yo encontre este virus en mi computador.
    El motivo de este e-mail es advertir a todos los usuarios de
    hotmail sobre un nuevo virus que circula por medio del MSN 
    Messenger. El virus se llama jdbgmgr.exe y se transmite 
    automáticamente por medio del Messenger y tambien por la 
    libreta de direcciones. El virus no es detectado por McAfee 
    o Norton y permanence en letargo durante 14 días antes de 
    dañar el sistema entero. Puede ser borrado antes de que elimine 
    los archivos de tu computadora. Para eliminarlo, solo hay que
    hacer los pasos siguientes:
    
      1. Ir a Inicio, pulsar "buscar"
      2.- En búsqueda "archivos o carpetas" escribir el nombre jdbgmgr.exe
      3.- Asegurarse de que este buscando en disco "C"
      4.- Pulsar en "buscar ahora"
      5.- Si aparece el virus (el icono es un osito) que tendrá el nombre
          de jdbgmgr.exe NO ABRIR POR NINGUN MOTIVO.
      6.- Pulsar en el botón derecho del ratón y eliminarlo (ira a la
          papelera de reciclaje).
      7.- Ir a la papelera de reciclaje y borrarlo definitivamente o bien
          vaciar la papelera entera.
    SI ENCUENTRAN EN VIRUS EN SUS EQUIPOS MANDAR ESTE MENSAJE A LAS
    PERSONAS QUE TENGAN EN SU LIBRETA DE DIRECCIONES ANTES DE QUE CAUSE
    ALGUN DAÑO
    
    

    And now a German Version.

    Subject: Virus-Warnung
    
    Auf jeden Fall durchlesen!!!
    
    DRINGEND!!!
    
    Nach einer Virus-Warnung von einem Freund habe ich den Virus tatsächlich
    auch bei mir gefunden. Dieser breitet sich über mein Adressbuch aus. Und
    Sie/Ihr steht auch alle in meinem Adressbuch. Es ist wirklich ein
    Ernstfall! Bitte schaut umgehend nach!!!
    
    Ausschnitt aus der bei mir eingetroffenen Warnung:
    
    Das Virus verbreitet sich von Adressbuch zu Adressbuch, also bitte
    gleich nachschauen. Es ist in der Tat von Norton und McAfee (und AntiVir
    9x) nicht auffindbar. Es schlummert etwa 14 Tage auf dem Rechner,
    aktiviert sich dann selbst und löscht sämtliche Daten auf der
    Festplatte.
    
    Die Anweisung zu seiner Entfernung ist recht einfach:
    1. Auf "Start" klicken, dann auf "Suchen", dann auf Dateien/Ordner.
    2. In der Suchmaske "jdbgmgr.exe" eintippen - so heisst die Virusdatein
    3. Bei "Suchen in" muss die Festplatte drin stehen, in der Regel C:
    4. Suche starten
    5. Wenn diese Datei auftaucht (sie hat einen kleinen Teddybär)
    
    AUF KEINEN FALL ÖFFNEN
    
    6. Mit der rechten Maustaste den Dateinamen anklicken, dann löschen
    drücken
    7. Bei der Rückfrage ob die Anwendung tatsächlich in den Papierkorb
    verschoben werden soll, Ja drücken
    8. Auf den Desktop gehen und den Papierkorb öffnen
    9. Die Datei "jdbgmgr.exe" im Papierkorb suchen und mit der rechten
    Maustaste löchen.
    
    Wenn Du/Sie die Datei auf dem Rechner gefunden hast/haben, bitte diese
    e-Mail an alle Kontakte im Adressbuch versenden, weil der Virus über das
    Adressbuch verbreitet wird. Danke!
    

    And finally an Italian version.

    Potreste avere ricevuto da noi o da altri vostri contatti, un virus che
    anche noi abbiamo a nostra volta ricevuto.
    Esso spedisce automaticamente il virus ad ogni nominativo presente nella
    rubrica indirizzi.
    Ci suono buone possibilit?che il virus sia anche nel vostro computer
    dato che voi siete nel nostro indirizzario.
    Il virus si chiama jdbgmgr.exe ed esso non viene individuato dai
    programmi antivirus Norton o McAfee.
    Il virus rimane inattivo per 14 giorni prima di danneggiare il sistema.
    Esso si spedisce automaticamente a tutti i vostri contatti,
    indipendentemente che voi spediate o no e-mail agli stessi
    Il virus non si mostra come una e-mail e quindi dovete verificare il
    vostro sistema seguendo le seguenti istruzioni per sbarazzarsi del
    virus:
    
    1. Cliccare Start e poi TROVA quindi FILE o CARTELLE
    
    2. scrivere il nome del file jdbgmgr
    
    3. Accertatevi di cercare nel disco C: ed in tutte le sub-cartelle o
    
    altri dischi drives che potreste avere (Risorse del computer).
    
    4. Cliccate TROVA
    5. Il virus ha come icona un orsetto Teddy bear con il nome jdbgmgr.exe.
    NON APRITE ASSOLUTAMENTE IL FILE!!!
    
    6. Se il file del virus ?presente nel vostro computer, evidenziatelo
    cliccandoci sopra con il tasto destro del mouse e selezionate
    
    ELIMINA.
    
    7. Aprite il CESTINO, evidenziate il file ed eliminate il file anche da
    qui!
    
    SE AVETE TROVATO IL VIRUS, DOVETE CONTATTARE TUTTE LE PERSONE NEL
    VOSTRO INDIRIZZIARIO, AFFINCHE' ANCHE LORO POSSANO CANCELLARE IL VIRUS
    DAL LORO COMPUTER E RUBRICA.
    
    Per fare questo:
    
    1. Aprite una nuova e-mail
    
    2. Cliccate sul simbolo della rubrica a fianco di A: (DESTINATARIO)
    
    3. Evidenziate ogni contatto ed aggiungetelo alla sezione CCN
    
    4. Copiate questo messaggio, incollate e spedite.
    
    Ci scusiamo per il disagio causato che purtroppo ?indipendente dalla
    nostra volont?
    Nonostante i sistemi fire-wall e antivirus qualche hacker ogni tanto
    riesce nel suo intento
    

    Virus or hoax? Why?

    jdbgmdr 2

    Hello readers,
    
     I have just cleaned my computer from a highly damaging computer virus
     Which is spreading rapidly through computer networks worldwide.
    
     There is one way to check to see if your computer is infected with this virus.
    
     Click the "Start" menu at the bottom left of your screen.
     Click the "Find" or "Search" button.
     Click the "Files or folders..." option.
     Then once the search application starts, type "Jdbgmgr.exe"
    
     If you have found this file, right-click on it and click the "Properties" tab.
     If the Properties menu has a picture of a bear on it,
     your computer is infected with this virus. (Note that the non-infected file
     picture has a hammer and a screwdriver shown in it)
    
     You may delete this file, but this is not the only file that the virus infects,
     To remove this virus, I have included a virus removal tool in the attachments
     that will scan all system files and remove any infectious code from them.
     This virus removal tool is very easy to use. If you have any trouble with this
     tool, read the help menu that the removal tool supplies.
    
     If your computer is infected with this virus, It is strongly recommended that you
     send this removal tool to as many people as you can to help remove the traces of
     this virus worldwide.
    

    Virus or hoax? Why?

    Life is Beautiful

    This information arrived this morning, from Microsoft and Norton. 
    Please send it to everybody you know who accesses the Internet. You may 
    receive an apparently harmless email with a PowerPoint presentation 
    called "Life is beautiful.pps." 
    If you receive it DO NOT OPEN THE FILE UNDER ANY CIRCUMSTANCES, and 
    delete it immediately. If you open this file, a message will appear on 
    your screen saying: 
    "It is too late now, your life is no longer beautiful", subsequently you 
    will LOSE EVERYTHING IN YOUR PC and the person who sent it to you will 
    gain access to your name, email and password. 
    This is a new virus which started to circulate on Saturday afternoon. 
    WE NEED TO DO EVERYTHING POSSIBLE TO STOP THIS VIRUS. UOL has already 
    confirmed its dangerousness, and the antivirus Softs are not capable of 
    destroying it. The virus has been created by a hacker who calls himself 
    "life owner", and who aims to destroying domestic PCs and who also fights 
    Microsoft in court! 
    That's why it comes disguised with extension pps. He fights in court for 
    the Windows-XP patent. 
    
    MAKE A COPY OF THIS EMAIL TO ALL YOUR FRIENDS. 
      

    Virus or hoax? Why?

    Deeyenda

       **********VIRUS ALERT**********
    
    
      VERY IMPORTANT INFORMATION, PLEASE READ!
    
      There is a computer virus that is being sent across the Internet.  If
      you  receive an email message with the subject line "Deeyenda", DO NOT
      read the message, DELETE it immediately!
    
      Some miscreant is sending email under the title "Deeyenda" nationwide,
      if you get anything like this DON'T  DOWNLOAD THE FILE!  It has a virus
      that rewrites your hard drive, obliterates anything on it.	Please be
      careful and forward this e-mail to anyone you care about.
    
      Please read the message below.
    
      Alex
    
      -----------
    
        FCC WARNING!!!!! -----DEEYENDA PLAGUES INTERNET
    
      The Internet community has again been plagued by  another computer
      virus.  This message is being spread throughout the Internet, including
      USENET posting, EMAIL, and other Internet activities.  The reason for
      all the attention is because of the nature of this virus and the
      potential security risk it makes.  Instead of a destructive Trojan
      virus (like most viruses!), this virus referred to as Deeyenda Maddick,
      performs a comprehensive search on your computer, looking for valuable
      information, such as email and login passwords, credit cards, personal
      inf., etc.
    
      The Deeyenda virus also has the capability to stay memory resident
      while running a host of applications and operation systems, such as
      Windows 3.11 and Windows 95.  What this means to Internet users is that
      when a login and password are send to the server, this virus can copy
      this information and SEND IT OUT TO UN UNKNOWN ADDRESS (varies).
    
      The reason for this warning is because the Deeyenda virus is virtually
      undetectable.  Once attacked your computer will be unsecure.  Although
      it can attack any O/S this virus is most likely to attack those users
      viewing Java enhanced Web Pages (Netscape 2.0+ and Microsoft Internet
      Explorer 3.0+ which are running under Windows 95).	Researchers at
      Princeton University have found this virus on a number of World Wide
      Web pagesand fear its spread.
    
      Please pass this on, for we must alert the general public at the
      security risks.
    

    Virus or hoax? Why?

    Family Pictures

     Subject: Virus to look out for
    
    DO NOT OPEN "NEW PICTURES OF FAMILY" It is a virus that will erase your
    whole "C" drive. It will come to you in the form of an E-mail from a 
    familiar person. I repeat a friend sent it to me, but called & warned 
    me before I opened it. He was not so lucky and now he can't even start 
    his computer! Forward this to everyone in your address book. I would 
    rather receive this 25 times than not at all. 
    
    Also: Intel announced that a new and very destructive virus was 
    discovered recently. If you receive an e-mail called "FAMILY PICTURES," 
    do not open it. Delete it right away! This virus removes all dynamic 
    link from your computer. Your computer will not be able to boot up.
    

    Virus or hoax? Why?