Editing Information security (section)

== Threats ==
{{Main|Threat (computer security)}}

Information security [[Threat (computer)|threats]] come in many different forms.<ref>{{Cite book|last=Rahim|first=Noor H.|title=Human Rights and Internal Security in Malaysia: Rhetoric and Reality.|date=March 2006|publisher=Defense Technical Information Center |oclc=74288358}}</ref> Some of the most common threats today are software attacks, theft of intellectual property, theft of identity, theft of equipment or information, sabotage, and information extortion.<ref>{{Cite journal|date=2018-09-14|title=Nuclear theft and sabotage threats remain high, report warns|url=http://dx.doi.org/10.1063/pt.6.2.20180914a|journal=Physics Today |doi=10.1063/pt.6.2.20180914a|issn=1945-0699|last=Kramer|first=David|issue=9 |page=30951 |bibcode=2018PhT..2018i0951K |s2cid=240223415}}</ref><ref>{{Cite book|first=Edward |last=Wilding|title=Information risk and security : preventing and investigating workplace computer crime|date=2 March 2017 |publisher=Routledge |isbn=978-1-351-92755-0|oclc=1052118207}}</ref> [[Computer virus|Viruses]],<ref>{{Cite book|title=CISSP Study Guide|last=Stewart |first=James|publisher=John Wiley & Sons|year=2012|isbn=978-1-118-31417-3|location=Canada|pages=255–257}}</ref> [[Computer worm|worms]], [[Phishing|phishing attacks]], and [[Trojan horse (computing)|Trojan horses]] are a few common examples of software attacks. The [[Intellectual property infringement|theft of intellectual property]] has also been an extensive issue for many businesses.<ref name=WHP_1>{{cite book| chapter=Why has productivity growth declined?| chapter-url=https://www.oecd-ilibrary.org/economics/oecd-economic-surveys-denmark-2009/why-has-productivity-growth-declined_eco_surveys-dnk-2009-4-en| publisher=[[OECD]]| pages=65–96| date=2009| access-date=30 November 2023| doi=10.1787/eco_surveys-dnk-2009-4-en| title=OECD Economic Surveys: Denmark 2009| isbn=9789264076556}}</ref> [[Identity theft]] is the attempt to act as someone else usually to obtain that person's personal information or to take advantage of their access to vital information through [[Social engineering (security)|social engineering]].<ref>{{Cite journal|date=2007|journal=Issues in Information Systems|doi=10.48009/2_iis_2007_297-302|issn=1529-7314|doi-access=free |title=Identity Theft: The Newest Digital Attackking Industry Must Take Seriously}}</ref><ref>{{Cite book|first1=Anna|last1=Wendel-Persson|first2=Fredrik|last2=Ronnhed|title=IT-säkerhet och människan : De har världens starkaste mur men porten står alltid på glänt|date=2017|publisher=Umeå universitet, Institutionen för informatik|oclc=1233659973}}</ref>  [[Sabotage]] usually consists of the destruction of an organization's [[website]] in an attempt to cause loss of confidence on the part of its customers.<ref>{{Cite journal|last1=Shao|first1=Ruodan|last2=Skarlicki |first2=Daniel P.|date=2014|title=Sabotage toward the Customers who Mistreated Employees Scale |url=http://dx.doi.org/10.1037/t31653-000|access-date=2021-05-28|website=PsycTESTS Dataset|doi=10.1037/t31653-000}}</ref> Information extortion consists of theft of a company's property or information as an attempt to receive a payment in exchange for returning the information or property back to its owner, as with [[ransomware]].<ref>{{Cite journal|last=Kitchen|first=Julie |date=June 2008|title=7side – Company Information, Company Formations and Property Searches |url=http://dx.doi.org/10.1017/s1472669608000364|journal=Legal Information Management|volume=8|issue=2|pages=146 |doi=10.1017/s1472669608000364|s2cid=144325193|issn=1472-6696}}</ref> One of the most functional precautions against these attacks is to conduct periodical user awareness.<ref>{{Citation|last=Young|first=Courtenay|title=Working with panic attacks|date=2018-05-08|url=http://dx.doi.org/10.4324/9780429475474-32|work=Help Yourself Towards Mental Health|pages=209–214|publisher=Routledge|doi=10.4324/9780429475474-32|isbn=978-0-429-47547-4|access-date=2021-05-28}}</ref>

[[Governments]], [[military]], [[corporation]]s, [[financial institution]]s, [[hospital]]s, non-profit organizations, and private [[businesses]] amass a great deal of confidential information about their employees, customers, products, research, and financial status.<ref name=CPS_1>{{Cite book| title=Table 7.7 France: Comparison of the profit shares of non-financial corporations and non-financial corporations plus unincorporated enterprises | author1=Lequiller, F.| author2=Blades, D.| url=https://www.oecd.org/sdd/UNA-2014.pdf| publisher=[[OECD]]| page=217| date=2014| access-date=1 December 2023| doi=10.1787/9789264214637-en| isbn=978-92-64-21462-0}}</ref> Should confidential information about a business's customers or finances or new product line fall into the hands of a competitor or [[Security hacker|hacker]], a business and its customers could suffer widespread, irreparable financial loss, as well as damage to the company's reputation.<ref>{{Citation|title=How Did it All Come About? |work=The Compliance Business and Its Customers|year=2012|place=Basingstoke |publisher=Palgrave Macmillan|doi=10.1057/9781137271150_3 |isbn=978-1-137-27115-0 |last1=Kasabov |first1=Edward |last2=Warlow |first2=Alex |pages=11–20 }}</ref> From a business perspective, information security must be balanced against cost; the [[Gordon-Loeb Model]] provides a mathematical economic approach for addressing this concern.<ref>{{Cite journal|first1=Lawrence A. |last1=Gordon|author-link1=Lawrence A. Gordon |first2=Martin P. |last2=Loeb |author-link2=Martin P. Loeb|journal=ACM Transactions on Information and System Security|volume=5 |issue=4| pages=438–457|doi=10.1145/581271.581274|title= The Economics of Information Security Investment|s2cid=1500788 |url=http://tissec.acm.org/|date=November 2002}}</ref>

For the individual, information security has a significant effect on [[privacy]], which is viewed very differently in various [[cultures]].<ref>{{Cite journal|last1=Cho Kim|first1=Byung|last2=Khansa|first2=Lara|last3=James|first3=Tabitha|date=July 2011 |title=Individual Trust and Consumer Risk Perception |journal=Journal of Information Privacy and Security |volume=7|issue=3 |pages=3–22 |doi=10.1080/15536548.2011.10855915 |s2cid=144643691 |url=http://dx.doi.org/10.1080/15536548.2011.10855915 |issn=1553-6548}}</ref>