The spy within: Corporate security compromised by business software.

摘要

In the information age, businesses have realized that value exists in customer information. To optimize this newly acquired asset, companies often create EULA (End User License Agreements) to allow this asset to be maximized. The EULAs are so complex users agree without reading them and are written in such a way that when a user agrees, the data that is collected by the company is virtually unlimited. In addition, the agreement allows the company to disperse the information as they deem necessary. When the information collected is system and network information, this information can be used as the basis for cyber-attacks. The purpose of this research was to explore the effects of business software data collection and reporting on the corporate security profile. The research concluded that the type of data collected by companies does include information that can be used as basis for cyber-attacks if exposed. This corporate information should be protected under privacy laws just as PII (Personally Identifiable Information) for individuals is protected. The current laws protecting PII are insufficient and enforcement is minimal. Keywords: Cybersecurity, PII, Privacy Act, Professor Christopher Riddell, Professor Cynthia Gonnella.