The importance of securing global networks and computing cannot be overstated. Countless everyday operations – from the unimpeded functioning of financial markets to the steady delivery of water and electricity to our homes– require secure information networks. As builders of the products that power and protect the world's information networks, BSA members are committed to developing a safe and legal online world through market-driven security systems and standards.
The success of the Internet depends on its security
Perhaps nowhere is the threat of computer crime and misuse more prevalent than on the Internet. And yet the success of the Internet is, in many ways, dependent upon the trust that individuals, businesses, and governments place in it. For that trust to exist, user information transmitted over computer networks must be safe from thieves, hackers and others who would gain access to, and make use of, sensitive information without permission. Consumers need confidence that personal information supplied for transactions will remain safe, just as businesses need confidence that their connections to suppliers and customers will not be interrupted.
Breaches of cyber security and privacy, whether via the Internet or other computer networks, can take a number of different forms, including hacking, denial of service attacks, and viruses and worms.
- "Hacking" of computer systems and "cracking" of websites are increasingly common practices in which individuals or small groups try to gain unauthorized access, often for purposes of vandalism or information theft.
- Denial of service attacks are concerted, large-scale efforts to shut down a website — usually a well-known commercial site — by flooding it with data from many sources.
- Viruses and worms are small, self-replicating software programs usually designed to travel through email and inflict damage on the computer systems of unsuspecting users.
How can individuals, businesses, and governments help secure their computers and networks?
Ensuring cyber security is an ongoing process, not a one-time fix. Cyber security requires the adoption of strong security policies, the deployment of proven cyber security software and appliances (such as anti-virus, firewalls, intrusion detection, encryption, public key infrastructure (PKI) and vulnerability management), and, in the case of larger organizations, the existence of trained security professionals. And these professionals must be continually trained in order to ensure that they are able to address and combat the evolving nature of cyber threats.
But while ensuring cyber security is an ongoing process, it is not a complex one. In fact, the key to enhancing the security of computer networks lies in three fundamental principles:
