Unit 9 · Session 4
Malware and Ethics
IT 231: IT and Application (BBM)
Learning Objectives 🎯
By the end of this chapter, you will be able to:
- ✅ Define what malware is and its purpose.
- ✅ Differentiate between a virus, a worm, and a Trojan horse.
- ✅ Describe the significant threat of ransomware.
- ✅ Identify the primary method of protection against malware.
What is Malware? 🔍
Malware, short for malicious software, is any software intentionally designed to cause damage to a computer, server, client, or computer network.
It's a general term for a wide variety of digital threats.
- Viruses
- Worms
- Trojan Horses
- Ransomware
- Spyware
The Virus 🦠
A piece of malicious code that attaches itself to a legitimate program or file.
- Needs a Host: Cannot exist or spread on its own. It requires a host program to run.
- Replication: When the host program is executed, the virus runs and can replicate itself to infect other programs on the system.
- Example: An infected Microsoft Word macro that runs when you open a document.
The Worm 🐛
A standalone program that can replicate itself and spread to other computers, typically over a network.
- Standalone: Does not need to attach to another program to run or spread.
- Network Propagation: Exploits vulnerabilities in operating systems or networks to travel from one computer to another without human intervention.
- Impact: Often consumes significant network bandwidth, causing network slowdowns or crashes.
The Trojan Horse 🐴
A program that disguises itself as something useful or harmless to trick the user into installing it.
- Deception is Key: Appears to be a legitimate application (e.g., a game, a utility, a software patch).
- User-Activated: Relies on the user to download and execute the program.
- Payload: Once installed, it can perform malicious actions like stealing data, installing a backdoor, or downloading other malware.
📊 At a Glance: Virus vs. Worm vs. Trojan
Virus 🦠
- Attaches to a host file
- Needs user action to spread (e.g., running the file)
- Spreads locally first
Worm 🐛
- Standalone program
- Self-propagates over a network
- Spreads rapidly
Trojan Horse 🐴
- Disguised as legitimate software
- Tricks user into installation
- Doesn't self-replicate
The Modern Menace: Ransomware 💰
A type of malware that encrypts a user's files and demands a ransom payment in exchange for the decryption key.
⚡ Threat: Your data becomes inaccessible. Even if you pay, there is no guarantee you will get your files back.
- Infection: Often delivered via a Trojan (e.g., a malicious email attachment).
- Encryption: Silently encrypts documents, photos, and other important files.
- Demand: A ransom note appears on the screen demanding payment, usually in cryptocurrency.
Practical Application: The Threat in Nepal
Real-World Example
In recent years, Nepal has seen a rise in phishing and ransomware attacks targeting individuals and businesses.
- Phishing Scams: Fake emails or SMS messages pretending to be from banks or popular services like eSewa or Khalti, trying to steal login credentials.
- Business Impact: Small businesses and even government portals have been targeted by ransomware, disrupting services and leading to data loss.
- Lesson: Always be skeptical of unsolicited messages and verify the source before clicking links or downloading attachments.
🛡️ Primary Defense: How to Protect Yourself
The single most important defense is up-to-date antivirus software.
Antivirus software performs several critical functions:
- Scans: Actively checks files and programs for known malware signatures.
- Removes: Quarantines or deletes malicious files it discovers.
- Prevents: Monitors system activity to block new infections in real-time.
Also critical: Keep your operating system and all applications updated with the latest security patches!
Summary & Key Takeaways
- Malware is a broad term for any software designed to cause harm.
- A virus needs a host program to spread, while a worm is a standalone program that can spread on its own across networks.
- A Trojan horse deceives you into installing it by pretending to be legitimate software.
- Ransomware is a dangerous form of malware that encrypts your files and demands a payment for their release.
- Your primary defense is using up-to-date antivirus software and practicing safe computing habits.
Exam Practice: Short Answer
- Define malware. Name any four types.
- Differentiate between a virus and a worm.
- What is ransomware? How can a business protect itself from it?
Exam Practice: Long Answer
- Explain the different types of malware with examples.
- How does malware spread? Suggest measures an organization should take to protect itself against malware.
Revise the chapter note before writing these answers.
Thank You!
Any questions?
Learning Objectives 🎯
By the end of this chapter, you will be able to:
- ✅ Define professionalism, ethics, and morality.
- ✅ Explain the importance of ethical behavior for IT professionals.
- ✅ Explain the purpose of a professional code of ethics.
The IT Professional's Responsibility
As an IT professional, you hold a position of significant trust and power.
You will have access to sensitive information and powerful tools that can impact individuals, businesses, and society.
This power demands a strong ethical foundation. ⚡
Core Concepts: A Three-Legged Stool
To understand professional conduct, we need to distinguish between three related ideas:
Let's define each one.
Defining the Terms 🔍
Morality
An individual's own personal principles regarding right and wrong. Your internal compass.
Ethics
Shared rules of conduct for a group or profession. The "rules of the road" for IT.
Professionalism
The competence and skill expected of a professional, including both technical ability and ethical behavior.
Professionalism: More Than Just Code
True professionalism is a combination of what you can do and how you choose to do it.
Technical Competence
- Securely managing a database
- Writing efficient algorithms
- Designing user-friendly interfaces
Ethical Behavior
- Protecting user privacy
- Maintaining data confidentiality
- Being honest about system limitations
One without the other is incomplete. A great IT professional excels at both.
Guiding Principles: The Code of Ethics
How do we ensure a shared standard of behavior across an entire industry?
A Code of Ethics is a formal document that provides principles and guidelines for ethical decision-making in a profession.
- It establishes a baseline for professional conduct.
- It provides a framework for navigating complex situations.
- Prominent organizations like the ACM (Association for Computing Machinery) have a widely recognized code.
Practical Application: An Ethical Dilemma in Nepal
Scenario: Data Security at a FinTech Startup
An IT manager at a popular digital wallet service in Nepal discovers a minor bug that occasionally logs user transaction details in plain text. Fixing it will delay a major, hyped product launch by one week.
- The "Easy" Path: Launch on time, hope no one notices, and fix the bug quietly later. This prioritizes business goals over user security.
- The Ethical Path: Immediately inform management of the security risk, delay the launch, and fix the bug. This upholds the professional duty to protect user data, aligning with principles in Nepal's Privacy Act.
Discussion: Legal vs. Ethical
Can an action be legal, but unethical?
Example: A software company in Nepal develops an employee monitoring tool. The tool is legal to sell and use if disclosed to employees.
The company markets it aggressively, emphasizing features that track every keystroke and take screenshots every minute, promoting a culture of mistrust.
- Is the company's action ethical, even if it's legal?
- What ethical responsibilities does the software developer have?
Key Takeaways 📊
- Morality is personal; ethics are professional standards. While related, ethics provide a common framework for all IT professionals.
- Professionalism includes both technical competence and ethical behavior. You cannot be a true professional without both.
- Professional codes of ethics provide essential guidance. They help you make responsible and ethical decisions throughout your career.
Exam Practice: Short Answer
- Differentiate between ethics and morality.
- What is a professional code of ethics? Why is it needed?
- Write any five of the Ten Commandments of Computer Ethics.
Exam Practice: Long Answer
- Explain the major ethical issues in information technology with examples.
- “Technical skill without ethics is dangerous.” Discuss with reference to the responsibilities of IT professionals.
Revise the chapter note before writing these answers.
📖 Read first (chapter notes)