This document discusses online security risks and recommendations. It begins with definitions of online security, information security, information warfare, and internet security risk. It then reviews literature finding increasing dependence on the internet, expansion of criminal activity online like identity theft, and growing demand for cybersecurity specialists. Specific examples of data breaches at major organizations are provided. The document recommends a multi-layered approach to online security including collaboration between governments, businesses, and individuals. It also recommends businesses reconsider security strategies with trends like cloud computing and social media increasing risk.

1. Online Security – An Assessment of the New Menace Global E-Business Marketing (200232) Online Seminar Mini Report Monroe Myers 95774855 Sunny Joshi 17093024

2. Table of Content Introduction - Online Security – An Assessment of the New Menace Literature Review & Findings Specific Topic Related Examples Discussion & Recommendations Futuristic Scenario & Class Activity

3. Introduction The following online seminar addresses aspects of a worrying trend in the digital world, online security, or lack thereof. And for a better understanding of the topic lets go through some key definitions related to the seminar. Before that, lets watch a short compilation of Personal security online videos. http://www.youtube.com/watch?v=zXzN3uJTGbI

4. Online Security – An Assessment of the New Menace Online security: “a threat that creates a circumstance, condition, or event with the potential to cause economic hardship to data or network resources in the form of destruction, disclosures, modification of data, denial of service, and/or fraud, waste and abuse” (Kalakota and Whinston, 1997). Information security: “the technical guarantees that ensure that the legal requirements and good practices with regard to privacy will be effectively met” (Flavian and Guinaliu, 2006).

5. Online Security – An Assessment of the New Menace Information warfare: “the actions intended to protect, exploit, corrupt, deny, or destroy information or information resources in order to achieve a significant advantage, objective, or victory over an adversary” (Alger, 1996). Internet Security Risk (ISR): “the degree of uncertainty and mistrust aroused from thoughts about providing personal and financial information over the internet” (Lynn et al., 2011).

6. Online Security – An Assessment of the New Menace Trust: “the willingness to rely on another based on expectations of ability, benevolence, and integrity (Lee and Turban, 2001; Bhattacherjee, 2002). Also defined as: “ the willingness of a trustor to be vulnerable to actions of a trustee due to an expectation the trustor will behave responsibly” (Mayer et al., 1995). Privacy: “to the degree to which the online shopping web site is safe and protects the customers’ information” (Chiu et al., 2009).

7. Literature Review & Findings Increasing dependence on Internet for various routine activities such as — finance and banking, energy, information and telecommunications, public health, transportation, emergency services, water, medical, defense, food and agriculture, shipping and postal services (Kenneth, Knapp and Boulton, 2006). Criminal activity is rapidly expanding into an underground economy specialising in identity theft, phishing and spam (Verton, 2004) as technical barriers to gaining access to valuable resources fall (Kenneth, Knapp and Boulton, 2006).

8. Literature Review and Findings Identity theft is another type of 'cyber-terrorism against individuals' (Sterling, 2004) encountered through online communications. As a result of the growing risk, demand for certifiably skilled cyber-security specialists growing at a fast pace.

9. Literature Review & Findings Following the development of hacking tools for attacking systems sporting the ubiquitous Windows operating system, cyber-criminals are turning their attention to Mac users as the Mac OS platform expands its market share (AVG, 2011) The rise of rogue smart-phone apps such as those relating to Google's Android Market and others is another worrying trend in the battle for greater online security measures (PC World, 2011).

10. Literature Review & Findings Curiously, most of the victims of cyber-attacks chose not to inform the outside world about such breaches. In 2005, only 20% of intrusions were reported to law enforcement agencies in the US, primarily because of concerns with negative publicity (Gordon et al., 2005) As a result of the recent wave of cyber-attacks and flowing from the perceived effects of potential liability, including leaks of corporate communications, negotiation contracts and other sensitive information influencing a firm's competitive-advantage in its industry and markets, demand for cyber-insurance is growing fast (Kolodzinski, 2002; Keating, 2003).

11. Literature Review & Findings Computer Economics estimated the damages resulting from The Love Bug, Melissa, Code Red to have exceeded US$54 billion in downtime, removal expenses, and repairs (Geralds, 2003). Ernst and Young alerted that online security-related occurrences can cost a firm US$20 million on average per incident (Garg, Curtis and Halper, 2003). A Fortune 1000 companies survey found a 64% annual growth rate in cyber-attacks carried out using the Internet (Bagchi and Udo, 2003). For example, cyber-technology is increasingly used in corporate espionage (Hansell, 2004).

12. Literature Review & Findings According to AVG (2011), 53,834 pieces of signed malware were detected in the first 5 months of 2011, a 300% increase on the previous year. Trusted malware involves passing and installing malicious code on a PC with the help of stolen digital certificates. Recently, stolen digital certificates made headlines with the Stuxnet 'worm' and the RSA hack of Lockheed Martin network breach (AVG, 2011). – It’s just like stealing the keys of the house as opposed to using physical force to gain access to a property. Around 7,000 spyware programs reportedly existed five years ago and are responsible for 50% of all PC crashes (Sipior, Ward and Roselli, 2005). Richmond (2004) argued that 91 percent of home computers host spyware code!

13. Specific Online Security Related Examples According to the source, MacAfee, a data security firm controlled by Intel Corp., through its five-year long “Operation Shady RAT”, identified 72 government and corporate parties that have been silently compromised, in some instances over years without being detected. List is as follows- 1 -Asian and Western national Olympic Committees 2 -The International Olympic Committee (IOC) 3 -The United Nations 4 -The Association of Southeast Asian Nations (ASEAN) Secretariat 5 - South Korean steel and construction companies 6 -A South Korean Government agency 7- A Department of Energy Research Laboratory 8 -A US real estate firm 9 -Four US defense contractors 10 - A Vietnam’s government-owned technology company 11 - A US federal government agency 12 - Several US state and county governments, and one computer network security company (Alperovitch, 2011).

14. Specific Online Security Related Examples 2011 Set to Be Worst Year Ever for Security Breaches (Liebowitz 2011) Companies as follows have faced severe breaches - Sony, the data-security firm RSA, Lockheed Martin, the email wholesaler Epsilon, the Fox broadcast network, NASA, PBS, the European Space Agency, the FBI, the British and French treasuries and the banking and insurance giant Citigroup. What do all these organizations have in common? Along with dozens of other companies and government agencies, they were victims of massive network security breaches in the first six months of this year. "In the last 10 years, I don't think we've seen breaches that have affected consumers at this scale," said OndrejKrehel, information security officer for Scottsdale

15. Discussion & Recommendations Given current and projected growth of information technology, its use in e-commerce and the magnitude, spread and affordability of launching cyber-threats in their many forms, contemporary levels of complacency afforded by business organizations, individuals and governments are largely and alarmingly inadequate. As superior cyber-attack technologies trickle down from state-sponsored labs to the increasingly sophisticated, financially-motivated cyber-criminals of late, businesses of all sizes are faced with the challenging task of managing the risks involvedspecially for small businesses. Therefore, it is strongly recommended for all stakeholders to adopt appropriate cyber-strategies for effective information security management.

16. Discussion & Recommendations A multi-layered approach to protecting online communications from prying eyes is needed in order to boost confidence in online services by a growing base of interested parties of all denominations governments, business organizations and individuals alike will need to collaborate in creating and maintaining an array of defense barriers in order to minimize chances for exposure to the rapidly sophisticated intrusions of the online world. For an effective strategy against the invisible threat, elements of technology, law and societal awareness are advised to be incorporated in management's strategy , it is significant to help small and medium enterprise become better acquainted with their increasingly important role in securing B2B and B2C networks and data streams in an effort to foster a safer online environments.

17. Discussion & Recommendations Bush (2003), for instance, divided the complex cyber-challenge into five levels as part of the National Strategy to Secure Cyberspace. Those levels are - 1 - Home users and small businesses 2 - Large enterprises 3 - Critical infrastructure sectors 4 - National vulnerabilities 5 - The global information grid of networked systems.

19. . Corporations are also recommended to collaborate with governments in designing and adopting appropriate mechanisms for dealing with the various facets of the problem and reaching binding agreements with regard to their rights and obligations in the process

21. Futuristic Scenario It’s the 22nd of August 2025….. …. A Nation has declared a war against an another Nation. Minimum or no use of Arms.. Keyboards replace Bullets.. Traditional reasons for war such as land and resources are replaced by Cyberspace invasions and capturing of the online infrastructure and the data virtually. Lets discuss..