AP Computer Science Unit 8 - Cybersecurity Study Guide

Definition of Computing Innovation: A computing innovation is defined as an entity that includes a program as an integral part of its function.
Categories of Computing Innovations: * Physical Innovations: Tools or machines that embody computing, such as a self-driving car. * Non-Physical Computing Software: Programs used for specific tasks, such as picture editing software. * Non-Physical Computing Concepts: Broad ideas or systems enabled by computing, such as e-commerce.
Unintended Consequences: * Computing innovations often lead to consequences that were not anticipated during their creation. * These consequences can be categorized as either positive or negative. * Predictive Challenges: While it is impossible to predict every single outcome, developers and society can try to better predict how innovations impact the world by thinking critically and bringing multiple perspectives to the table.

Definition: Personally Identifiable Information (PII) refers to any information about an individual that identifies, links, relates, or describes them.
The Role of Technology: Technology enables the collection, use, and exploitation of information about, by, and for individuals, groups, and institutions.
Data Sources for Creation of Knowledge: Several factors can be used to create detailed knowledge about an individual: * Geolocation: Tracking the physical location of a user. * Cookies: Small files stored on a user's computer to track site activity. * Browsing History: Records of the websites a user has visited.
Necessity of PII for Functionality: Most digital technology requires some form of PII to function correctly. Examples include: * Street Navigation: Needs to know your current location. * Online Purchases: Uses PII stored online to simplify and complete transactions.
The Difficulty of Control: Once data is made digital and shared online, it becomes significantly harder to control.
Risks of PII Exposure: * Identity Theft: PII can be used to steal a person’s identity. * Stalking: Information can be used to stalk individuals online. * Profiling: Information posted on social media can be combined to create a comprehensive profile of an individual.

Information Collection for Improvement: Websites often collect data beyond what is strictly necessary to improve their services.
Targeted Advertising: Many services and websites collect information, such as browser history, to create detailed profiles of users' identities and preferences for advertising purposes.
Search Engines: Search engines record and maintain a history of searches made by users. This information is utilized to: * Suggest relevant websites. * Conduct targeted marketing.
The Cost of "Free" Products: Our private data powers many computing innovations. Products that are convenient, personal, and useful are often provided for "free" because users "pay" for them with their data.
Misuse of Data: Data intended for one purpose can be used by companies, governments, or criminals in ways that were never intended or that threaten personal privacy.
The Digital Society Debate: The balance between innovation, privacy, and security is a subject of continuous debate. Future generations will decide the nature of the digital society they inhabit.

Phishing: A technique that attempts to trick a user into providing personal information. This stolen information can then be used to access sensitive online resources, including bank accounts and emails.
Keylogging: The use of a program to record every single keystroke made by a computer user. This is done to gain fraudulent access to passwords and other confidential information.
Malware: Software specifically intended to damage a computing system or to take partial control over its operation.
Rogue Access Point: A wireless access point that provides unauthorized access to secure networks.

Encryption: The process of encoding messages to keep them secret, ensuring only "authorized" parties can read the content.
Decryption: A process that reverses encryption, taking a secret message and reproducing the original plain text.
Cipher: The generic term for a technique or algorithm that performs encryption.
Caesar’s Cipher: A specific technique for encryption that involves shifting the alphabet by a certain number of characters.
Cracking Encryption: The act of attempting to decode a secret message without knowing all the specifics of the cipher used.
Symmetric Key Encryption: A method that involves using one single key for both the encryption and decryption processes.
Public Key Encryption: A method that pairs a public key for encryption with a private key for decryption. * The sender does not need the receiver’s private key to encrypt a message. * The receiver’s private key is required to decrypt the message.

Multi-factor Authentication (MFA): A security system that requires at least two steps (layers) to unlock protected information. Each step adds a new layer of security that must be breached to gain unauthorized access.
Categories of Multi-factor Authentication: * Something you know: Knowledge-based factors, such as a password. * Something you possess: Physical factors, such as a phone. * Something you are: Biometric factors, such as a fingerprint.
Computer Virus Scanning Software: A tool used to protect a computing system against various infections.
Best Practices for Data Protection: 1. Use Multi-factor Authentication. 2. Update Your Software regularly.

Harm and Impact: Computing innovations raise legal and ethical concerns when they harm people or play a significant role in social and political issues.
Specific Examples of Concise Concerns: * Software that allows access to digital media downloads and streaming (copyright and distribution issues). * Algorithms with bias (fairness and equity issues). * Devices that collect and analyze data by continuously monitoring activities (surveillance and privacy issues).
Facial Recognition Statistics: Approximately $50\%$ of humans are currently in facial recognition databases without their knowledge.