Module 10: Internet Privacy, Internet Security, Netiquette

1. Information security protects three things — the CIA triad: confidentiality (only the right people can see it), integrity (it has not been changed without permission), and availability (it is there when you need it). Every security control protects one of the three.
2. Risk management is deciding which threats matter and what to do about them: identify the asset (your Canvas account, the school's student records), the threat (phishing, ransomware, a lost laptop), the likelihood and the impact, then reduce the risk with controls — or accept it, or transfer it (insurance, cloud provider).
3. Authentication proves who you are with something you know (password), something you have (phone, security key), or something you are (fingerprint, face). Multifactor authentication (MFA) uses two or more — a password plus a code from your phone — and stops most account takeovers even when the password leaks.
4. Passwords: long beats clever. A passphrase of four or more unrelated words with numbers and symbols is stronger than P@ssw0rd. Never reuse a password across sites; use a password manager; never share a password, including with a friend.
5. Malware is software built to damage, spy, or take control: viruses (attach to files), worms (spread on their own across networks), trojans (pretend to be useful), spyware (watches you), ransomware (encrypts your files and demands payment). Keep software updated, run antivirus, and do not install what you did not go looking for.
6. Phishing is a message that pretends to be from someone you trust (bank, school, a friend) to get you to click a link, open an attachment, or enter a password. Signs: urgency, threats, prizes, a sender address that is slightly off, a link whose real address does not match. Slow down. Verify by going to the site yourself, not through the link. Report it.
7. Social engineering is tricking people instead of computers — a phone call from 'IT' asking for your password, someone tailgating through a locked door. No real IT department asks for your password.
8. Encryption scrambles data so only someone with the key can read it. https:// and the padlock mean the connection between your browser and the site is encrypted; VPNs encrypt your traffic on public Wi-Fi; encrypted drives protect a lost laptop.
9. Backups protect availability: a second copy in a second place (cloud drive, external drive) on a schedule. Ransomware and a dead hard drive both become minor problems when a backup exists. Test that you can restore it.
10. Firewalls filter network traffic in and out; updates (patches) close holes attackers use; least privilege means people and programs get only the access they need. Together with MFA, backups, and awareness training, these are the controls organizations use to manage risk.
11. Internet privacy: websites and apps collect data through cookies, trackers, location, and what you post. Your digital footprint is the trail of everything you have posted, searched, and bought — it lasts, and colleges and employers look. Use privacy settings, think before posting, and know what an app's permissions ask for.
12. Netiquette — respectful conduct online, and the rule for every Canvas discussion: address the idea, not the person; use complete sentences and proofread; no ALL CAPS (it reads as shouting); no sarcasm that cannot be heard; keep private matters (grades, personal questions) out of public threads; give credit when you use someone's idea.
13. Module 10 items: Cybersecurity Assignment (20) and Module 10 Quiz (20) — 40 points, the week of Nov 2. After Module 10: Career Project prep (11/9), Final Career Project Presentations (11/16–11/24, 25 points), last day of regular classes 11/24, and Exam 2 – Chapters 6–10 in the final examination period 12/01–12/07 (100 points).

Raise your hand. Mr. James gets a message right away and can help you remotely. Nothing else is stored — just your last name, grade, and where you're stuck.

Ask at home: What is the strongest password habit in our house — and the weakest?

En español: ¿Cuál es el hábito de contraseñas más fuerte en nuestra casa y cuál es el más débil?