CSS Prepare

optional · CSS study notes

🗄️ OLD — Computers & Society — Security, Ethics, Law (consolidated)

⚠️ SUPERSEDED: This page's content has been split into individual topic pages matching the exact textbook outline. See the main P-I.I. Introduction to Computing index for the current granular pages. Keeping this only for reference.

CSS Computer Science (Optional) — Paper-I, Section-A, Topic I (Introduction to Computing). Covers: Computers & Society, Information Security/Privacy, Computer Crimes, Ethical Issues, Viruses, Plagiarism, Intellectual Property Rights, IEEE/ACM Code of Ethics and Professional Practice, Cyber Crime and Internet Era (2017).

Computers & Society

Computers have transformed nearly every dimension of society — communication, commerce, education, healthcare, and governance. This transformation brings both opportunity and new categories of risk and responsibility, which is why "Computers & Society" as a topic covers security, ethics, and law together: technical capability alone is not enough — society needs frameworks to govern how that capability is used.

Information Security / Privacy

Information security aims to protect data from unauthorized access, alteration, or destruction. The foundational framework is the CIA Triad:

  • Confidentiality: ensuring information is accessible only to those authorized to see it (achieved via encryption, access controls, authentication)
  • Integrity: ensuring information is accurate and has not been tampered with (achieved via checksums, digital signatures, version control)
  • Availability: ensuring authorized users can access information/systems when needed (achieved via redundancy, backups, protection against denial-of-service attacks)

Privacy specifically concerns an individual's right to control their own personal data — who collects it, how it's used, and who it's shared with. Privacy and security are related but distinct: security is the mechanism protecting data; privacy is the right being protected.

Computer Crimes

Computer crime (cybercrime) refers to illegal activities carried out using computers or networks, or that target computer systems themselves. Common categories:

  • Hacking: unauthorized access to a computer system or network
  • Identity theft: stealing personal information to impersonate someone, typically for financial fraud
  • Phishing: fraudulent attempts (often via email) to trick users into revealing sensitive information (passwords, card numbers) by posing as a trustworthy source
  • Cyberstalking: using digital means to harass or monitor an individual persistently
  • Fraud: using computer systems to deceive for financial or personal gain
  • Denial-of-Service (DoS) attacks: overwhelming a system with traffic so it becomes unavailable to legitimate users

Cyber Crime and Internet Era (2017 Past Paper)

As Internet usage grew globally, cybercrime evolved from isolated hacking incidents into large-scale, often cross-border, organized activity. Key points relevant to this specific past-paper angle:

  • The borderless nature of the Internet means cybercrime frequently crosses national jurisdictions, complicating law enforcement and prosecution
  • Anonymity tools (VPNs, proxy servers, cryptocurrency) have made tracing perpetrators more difficult
  • Governments have responded with dedicated cybercrime legislation — in Pakistan, this is primarily the Prevention of Electronic Crimes Act (PECA), 2016, which criminalizes unauthorized access, data breaches, cyberstalking, and other electronic offenses, and establishes the FIA Cyber Crime Wing as the primary investigative body
  • The rise of e-commerce, online banking, and social media has expanded both the opportunities for legitimate digital life and the attack surface for cybercriminals — a key "Internet era" theme examiners expect in an essay-style answer on this topic

Ethical Issues

Beyond what is strictly illegal, computing raises broader ethical questions about right and wrong conduct:

  • Digital divide: unequal access to computing/Internet resources across economic or geographic lines, raising questions of fairness and inclusion
  • Surveillance: the ethical balance between security/monitoring and individual privacy (e.g., government surveillance, workplace monitoring)
  • Automation and job displacement: the ethical responsibility of organizations deploying automation/AI that displaces human labor
  • Data ownership and consent: whether users meaningfully understand and consent to how their data is collected and used (e.g., long, unread terms-of-service agreements)
  • AI bias and accountability: ensuring algorithmic systems don't perpetuate discrimination, and determining who is accountable when they do
  • Professional ethics: computing professionals are expected to act with honesty, competence, and social responsibility in their work — formalized in codes of conduct like the one below

IEEE/ACM Code of Ethics and Professional Practice

The IEEE (Institute of Electrical and Electronics Engineers) and ACM (Association for Computing Machinery) — the two leading global professional bodies for computing — jointly (and separately) publish codes of ethics that set expected standards of conduct for computing professionals. Core principles typically emphasized:

  1. Public interest: professionals should act consistently with the public good, health, safety, and welfare
  2. Honesty and integrity: be honest about one's own qualifications, limitations, and the capabilities of the systems one builds
  3. Fairness and non-discrimination: avoid creating or perpetuating unfair discrimination in systems and professional conduct
  4. Respect for privacy: handle personal data responsibly and only as needed
  5. Competence: maintain and improve professional skill; do not undertake work beyond one's competence without disclosure
  6. Avoid harm: consider the potential negative consequences of one's work on individuals and society
  7. Respect intellectual property: give proper credit and honor copyrights/licenses (directly ties to the Plagiarism and IPR sections below)

Why examiners test this: it connects the technical subject matter of computing directly to the governance/ethics dimension the CSS exam values — expect this to appear as a short-answer or essay prompt on "professional responsibility in computing."

Viruses & Malware

Malicious software ("malware") comes in several distinct forms — a frequently confused area, so precise definitions matter:

  • Virus: attaches itself to a host file/program and requires user action (e.g., opening an infected file) to activate and spread
  • Worm: self-replicating — spreads independently across a network without needing a host file or user action
  • Trojan (Trojan Horse): disguises itself as legitimate software to trick users into installing it; does not self-replicate
  • Ransomware: encrypts a victim's data and demands payment (a ransom) for the decryption key
  • Spyware: covertly monitors and collects user activity/data without consent

Plagiarism

Plagiarism is presenting someone else's work, ideas, or words as one's own without proper attribution. In a computing context this includes copying code, algorithms, or written content without crediting the original source. It is treated as a serious academic and professional ethics violation, distinct from copyright infringement (though the two often overlap) — plagiarism is fundamentally about dishonesty in attribution, whereas copyright infringement is about unauthorized use of protected expression regardless of attribution.

Intellectual Property Rights (IPR)

IPR grants creators legal rights over their creations. Three main categories relevant to computing:

  • Copyright: protects the expression of an idea — source code, written text, digital art, music. Software is primarily protected by copyright; copyright protects the specific code as written, not the underlying algorithm/idea.
  • Patent: protects an invention or process — can cover novel technical methods (e.g., a specific algorithmic technique meeting patentability criteria) for a limited period, granting exclusive rights to the inventor.
  • Trademark: protects brand identifiers — names, logos, slogans that distinguish a company's products/services (e.g., a software company's logo).

Key distinction for exams: copyright protects the code as written (expression); it does not protect the underlying idea or algorithm — someone else can independently write different code implementing the same algorithm without infringing copyright (though a patent, if one exists on that algorithm, could still apply).

MCQ Traps

  • A virus needs a host file and user action to spread; a worm self-replicates and spreads on its own — the single most commonly confused pair in this section.
  • Trojans do not self-replicate — that's what distinguishes them from both viruses and worms.
  • Plagiarism ≠ copyright infringement — plagiarism is about dishonest attribution; copyright infringement is about unauthorized use of protected expression. They often overlap but are conceptually distinct.
  • Software copyright protects code/expression, not the underlying idea/algorithm — a frequently tested nuance.
  • In Pakistan, cybercrime is primarily governed by PECA 2016, investigated by the FIA Cyber Crime Wing.
  • Confidentiality, Integrity, Availability — memorize as the CIA triad in that exact order; each maps to a distinct protective goal.

Self-Test Questions

  1. Define the CIA triad and give one real-world mechanism that supports each element.
  2. Distinguish plagiarism from copyright infringement.
  3. Differentiate a virus, a worm, and a trojan by their spreading mechanism.
  4. What Pakistani law primarily governs cybercrime, and which agency investigates it?
  5. Name three principles typically found in an IEEE/ACM-style code of ethics for computing professionals.
  6. Why does software copyright not protect the underlying algorithm, only the code itself?