Activity 12-1 # 1 and 2
1. From the cases summarized above(from the book), explain what constitutes a computer crime.
(a) Credit Card Fraud is computer crime for which a person unlawfully obtaining and using a credit card from the other person without his knowledge or the card may steal from him
(b) Creating a virus and unleashing it to the network is also a computer crime because the consequences that suffered here were thousands of servers in net due to the shutdown of system operation.
(c) Hacking. This is also a serious computer crime by breaking the security of the system.
d) Spamming. spam even more generally as any unsolicited e-mail. However, if a long-lost brother finds your e-mail address and sends you a message, this could hardly be called spam, even though it's unsolicited. Real spam is generally e-mail advertising for some product sent to a mailing list or newsgroup.
The activity of spam is obviously a computer crime because you can imagine this, aside of wasting people's time with unwanted e-mail, spam eats up a lot of network bandwidth.
2. Discuss at least three other examples of computer crimes.
(A) Unauthorized Use.
1. Changing data. For example, change a grade on a school transcript, add "money" to a checking account, etc. Unauthorized changing of data is generally a fraudulent act.
2. Deleting data. Deleting entire files could be an act of vandalism or sabotage.
B. Denial of Service (DoS) Attacks
A denial of service attack occurs when an Internet server is flooded with a nearly continuous stream of bogus requests for webpages, thereby denying legitimate users an opportunity to download a page and also possibly crashing the web server.
Criminals have developed a simple technique for executing a distributed DoS attack:
· The criminal first plants remote-control programs on dozens of computers that have broadband access to the Internet. The remote-control program will, at the command of the criminal, issue a nearly continuous series of pings to a specified victim's website.
· When the criminal is ready to attack, he instructs the programs to begin pinging a specific target address. The computers containing the remote-control programs act as "zombies".
· The victim computer responds to each ping, but because the zombie computers gave false source addresses for their pings, the victim computer is unable to establish a connection with the zombie computers. Because the victim computer waits for a response to its return ping, and because there are more zombie computers than victims, the victim computer becomes overwhelmed and either (a) does nothing except respond to bogus pings or (b) crashes.
· Typically, after one or two hours, the criminal instructs his programs to stop pinging the victim. This brief duration is not because the criminal is a nice person, but because long-duration attacks make it easier for engineers at the victim's website to promptly trace the source of the attacks.
C. Harassment & Stalking
In general, the harasser intends to cause emotional distress and has no legitimate purpose to his communications. Harassment can be as simple as continuing to send e-mail to someone who has said they want no further contact with the sender. Harassment may also include threats, sexual remarks, pejorative labels (i.e., hate speech).
A particularly disturbing form of harassment is sending a forged e-mail that appears to be from the victim and contains racist remarks, or other embarrassing text, that will tarnish the reputation of the victim.
It is often difficult to get law enforcement personnel and prosecutors interested in harassment, unless threats of death or serious bodily harm are made, simply because the resources of the criminal justice system are strained by "more serious" criminal activities. I put "more serious" in quotation marks, because the victim of harassment certainly is adversely affected by the harassment, therefore it is a serious matter to the victim. But the law treats harassment as a misdemeanor, the group of less serious crimes.
