Cybersecurity and Ethics

**1. Why Cybersecurity Matters — Pakistan's Digital Frontline**

As internet use grows in Pakistan, more daily life moves online: banking, education, government services, and messaging. That means more data is stored digitally — and more systems become targets for attacks.

Cyber incidents (like data leaks, hacked accounts, and ransomware) have affected organisations worldwide, including in Pakistan. This is why every computer science student must understand threats, prevention, and ethical responsibility.

Cybersecurity is the practice of protecting computer systems, networks, and data from unauthorized access, theft, or damage.

**2. Common Cyber Threats**

Malware (malicious software):

• Virus: attaches to files, spreads when file is opened, corrupts/deletes data
• Worm: self-replicating, spreads across networks without user action
• Trojan: disguises as legitimate software, gives attacker access
• Ransomware: encrypts your files, demands payment (ransom) for the decryption key
• Spyware: secretly monitors activity, steals passwords and personal data

Social engineering (manipulating humans, not computers):

• Phishing: fake emails/websites that trick you into entering passwords (e.g., a fake HBL bank email asking to "verify your account")
• Shoulder surfing: watching someone type their PIN at an ATM
• Pretexting: calling and pretending to be IT support to get your password

Other attacks:

• Brute force: trying every possible password combination until one works
• SQL injection: inserting malicious SQL code into a website form to access/modify the database
• DDoS (Distributed Denial of Service): flooding a server with traffic to crash it
• Man-in-the-middle: intercepting communication between two parties

**3. Prevention and Protection**

Technical measures:

• Strong passwords: 8+ characters, mix of uppercase, lowercase, numbers, symbols. "Karachi123!" is better than "password"
• Two-factor authentication (2FA): password + phone code (JazzCash uses this)
• Encryption: scrambling data so only authorised users can read it (HTTPS, end-to-end encryption in WhatsApp)
• Firewalls: monitor and filter network traffic, blocking suspicious connections
• Anti-malware software: detects and removes viruses, trojans, etc.
• Regular updates/patches: fix known security vulnerabilities
• Backups: regular copies of data so you can recover from ransomware or hardware failure

Human measures:

• Training staff to recognise phishing emails
• Not clicking unknown links or downloading suspicious attachments
• Using different passwords for different accounts
• Locking screens when away from the computer

**4. Ethical, Legal, and Environmental Issues**

Ethical issues in computing:

• Privacy: should companies track your browsing history? Should CCTV cameras record everywhere?
• Digital divide: urban Karachi has fast broadband; rural Balochistan may have no internet at all
• AI bias: algorithms can discriminate if trained on biased data
• Fake news: social media spreads misinformation rapidly (a major concern in Pakistan during elections)

Legal frameworks:

• Pakistan's Prevention of Electronic Crimes Act (PECA) 2016: criminalises hacking, cyberstalking, and online fraud
• Data protection: organisations must protect personal data they collect
• Intellectual property: software piracy is illegal (though widespread in Pakistan's markets)
• Copyright: using someone's code, images, or content without permission is illegal

Environmental impact:

• E-waste: Pakistan is one of the world's growing e-waste destinations — old phones, computers, and batteries contain toxic materials (lead, mercury)
• Energy consumption: data centres consume massive electricity — a major concern in energy-scarce Pakistan
• Positive: technology enables paperless offices, remote work (reducing transport emissions), and smart energy management

**5. Exam Strategy**

• Threats and prevention questions: name the SPECIFIC threat (don't just say "malware" — say "ransomware" or "phishing").
• Prevention must MATCH the threat: phishing → staff training + email filtering; brute force → strong passwords + account lockout.
• Ethics questions want BOTH sides: "discuss whether CCTV improves safety" → yes (deters crime) but also no (invasion of privacy).
• Always mention PECA 2016 when asked about Pakistan's cyber laws.
• Environmental questions: mention e-waste AND energy consumption AND at least one positive impact.
• "Explain the importance of encryption" → data is unreadable if intercepted; protects privacy; essential for banking/messaging.