- Most ethical and legal issues in computer system are in the area of individual’s right to privacy versus the greater good of a larger entity i.e. a company or a society. For example, tracking how employees use computers, crowd surveillance, managing customer profiles, tracking a person’s travel with passport and so on. A key concept in resolving this issues is to find out, what is a person’s expectation of privacy. Classically, the ethical issues in security system are classified into following 4 categories:
- Privacy: This deals with the right of an individual to control personal information. It is the protection of personal or sensitive information. Privacy is subjective. Different people have different ideas of what privacy is and how much privacy they will trade for safety or convenience.
- Accuracy: This talks about the responsibility for the authenticity, fidelity an accuracy of the information.
- Property: This determines who the owner of the information is and who controls access.
- Accessibility: This deals with the issue of the type of information, an organization has the right to collect. And in that situation, it also expects to know the measures which will safeguard against any unforeseen eventualities.
- When dealing with legal issues, we need to remember that there is hierarchy of regulatory bodies that govern the legality of information security. The hierarchy can be roughly described as follows:
- International: e.g. International Cybercrime Treaty
- Federal: e.g. FERPA, GLB, HIPAA
- State: e.g. UCITA, SB 1386 etc.
- Organization: e.g. Computer Use policy
Related Articles
-
BlowFish Algorithm
BlowFish was developed by Bruce Schneier. Blowfish is a symmetric block cipher.It encrypts 64 bit block with variable-length key,...
-
Explain Asymmetric key cryptography
In Asymmetric key cryptography, each person has two keys i.e. Public key& Private key. The public key is known...
-
Integrity in network security
When content of message change after sending the message by sender but before receiver receive it then we can...
-
Mono alphabetic cipher in Network Security tybscit semester 5
Mono-Alphabetic cipher also known relies on a fixed replacement structure. In this technique each alphabet in the plain text...
-
Modified Cesar Cipher
Modified Caesar cipher is an extension to Caesar cipher. Caesar cipher is not good because it can be analyzed...
-
Explain Symmetric and Asymmetric key cryptography together
Indeed, in practice, symmetric-key cryptography and asymmetric-key cryptography are combined to have a very efficient security solution. The way...
-
Availability in network security
The principle of availability states that information should be available to authorized user at all the time. Example :-...
-
Poly alphabetic Cipher in Network Security
The Poly-Alphabetic cipher is also an example of substitution cipher which uses multiple one-character keys. In the program we...
