Encryption and Decryption

Encryption is the conversion of data into a form, called a ciphertext, that cannot be easily understood by unauthorized people.

Two basic types of encryption are commonly used:

1. Symmetric Encryption, where a single secret key is used for both encryption and decryption.

2. Asymmetric Encryption, where a pair of keys is used one of Encryption and the other for Decryption.

Some interesting politics surround strong Encryption:

1. strong encryption algorithms are considered to be a munitions by the United States government.

2. some countries forbid their citizens from using strong Encryption.

3. strong Encryption algorithms are freely available everywhere in the world, on the internet.

Encryption excess:

1. Confidentiality of information guaranteed
2. Provide authentication and integrity protection in the checksum algorithm / hash
3. Tackling the phone tapping and email
4. For digital signature 

 

Encryption weakness:

1. Improper handling or human error The lack of encryption of data management

2. Deficiencies in the cipher itself

3. Brute force attack

4. Encryption terrorist plot
5. Concealment of a criminal record by a criminal 

6. Messages can not be read when the message recipient forgotten or lost keys

Purpose of encryption:

1. Confidentiality: That is to keep the content of information of anyone other than who has the authority or the secret key to unlock the encrypted information.

2. Data Integrity: To maintain the authenticity / integrity of the data, the system must have the ability to detect data manipulation by parties who are not entitled to, such as insertion, deletion, and other data pensubsitusian into the actual data.

3. Authentication: This relates to the identification / recognition, both the unity and the information system itself.

4. Non-repudiasi/Nirpenyangkalan: Is an attempt to prevent denial of shipment / creation of an information by the send / make.    

 

   

Decryption is the process of converting encrypted data back into its original form, so it can be understood.

Encryption/decryption is especially important in wireless communication, because wireless circuits are easier to tap than their hard-wired counterparts.

 

Manangement Information System assigment Related Data

Group Members :

• Indah Purnamasari Eroika (C1L011007)
• Handhika Tiya Kusuma  (C1L011010)
• Parama Anisa Fajariko (C1L011016)
• Santy Arlieza Wijayanti (C1L011021)

CHAPTER 8 - CASE 1 (WHEN ANTIVIRUS SOFTWARE CRIPPLES YOUR COMPUTERS)

 1.

• Management Factor which causing the McAfee’s software is when the test simulation were done, management didn’t run these for windows XP with service pack 3. Users using the McAfee Virus Scan were using Widows XP service pack 3 and the viruse scan version 8.7, these affected to faulty update download. 

• Organization Factor is when the staff didn’t work efficiently. McAfee update  the virus scan that was intended to deal with the new virus named ‘w32/wecorl.a”. but the company doesnt detect the problem that this virus could make itself appears as the name svchost.exe, which a windows file that is critical to PC’s performance. 
• Technology problem is without thesvchost.exe, windows can’t boot properly. McAfee determined that the majority of affected machines were using windows XP  service pack 3 combined with MCAfee Virus scan 8.7. they also noted that  the “Scan Process on Enable” opyion of virus scan, off by default in most Virus scan installation, was turned on in the majority of effected computers.

2.  The business impact is the reputation to the McAfee company was dropped. Besides that, the customer also get the impact because the users’ computer were crippled or totally not functional.

   3. If i were an enterprise customer, I would consider McAfee’s response to the problem is not be acceptable. Because the slipup caused the system becomes unsecured. McAfee also makes a mistake that without the svchost.exe, windows can’t boot properly. Virus scan users applied the update, tried rebooting their systems, and were powerless to act as their systems went haywire, repeatedely rebooting, losing their network capabilities and their ability to detect USB drivrs, which is the only way of fixing affected computers.

    4. They should implement the additional QA protocols for any releases that directly impact critical system files. McAfee is also rolling out additional capabilities in Artemis that will provide another level of protection against false positives by leveraging an expensive whitelist of critical system files and their associated cryptographic hashes.

Purposes of Information Systems

1. TRANSACTION PROCESSING SYSTEMS: process data resulting from business transaction, update operational databases and produce business documents.

a software system, or software/hardware combination, that supports transaction processing.

example: sales and inventory processing and accounting systems, ATM, airline reservation systems, online ticketing system.

2. PROCESS CONTROL SYSTEMS: monitor and control industrial processes.

monitors a manufacturing environment and electronically controls the process or manufacturing flow based on  limits set by the user.

example: petroleum refining, power generation and steel production system.

3. ENTERPRISE COLLABORATION SYSTEMS: enhance team and workgroup communications and productivity and include applications that are sometimes called office automation systems.

example: e-mail, chat, and videoconferencing groupware systems.

4. MANAGEMENT INFORMATION SYSTEMS: provide information in the form of reports and displays to managers and many business professionals.

example: sales analysis, production performance, and cost trend reporting systems.

5. DECISION SUPPORT SYSTEMS: give direct computer support to managers during the decision-making process.

example: product pricing, profitability forecasting, and risk analysis systems.

6. EXECUTIVE INFORMATION SYSTEMS: provide critical informaton from a wide variety of internal and external sources in easy-to-use displays to executives and managers.

example: systems for easy access to analysis of business performance, actions of competitors, and economic developments to support strategic planning.

7. EXPERT SYSTEMS: knowledge-based systems that provide expert advice and act as expert consultants to users.

example: credit application advisor, process monitor, and diagnostic maintenance systems.

8. KNOWLEDGE MANAGEMENT SYSTEMS: knowledge-based systems that support the creation, organization, and dissemination of business knowledge within the enterprise.

example: intranet access to best business practices, sales proposal strategies, and customer problem resolution system.

9. STRATEGIC INFORMATON SYSTEMS: support operations or management processes that prvide a firm with strategic products, services, and capabilities for competitive advance.

example: online stock trading, shipment tracking, and e-commerce Web systems.

10. FUNCTIONAL BUSINESS SYSTEMS: support a variety of operational and managerial applications of the basic business functions of a company.

example: information systems that support applications in accounting, finance, marketing, operations management and human resources management.

references: O'Brien Marakas Textbook, www.en.m.wikipedia.org , www.au.answers.yahoo.com , www.altera.com