Professional Practices PPT Slide on Chapter 5: Crime
- 1. A GIFT OF FIRE FOURTH EDITION SARA BAASE Chapter 5: Crime
- 2. WHAT WE WILL COVER Hacking Identity Theft and Credit Card Fraud Scams and Forgery Laws That Rule the Web
- 3. HACKING Hackingāintentional, unauthorized access to computer systemsāincludes a wide range of activities from minor pranks to huge thefts and shutdowns of services on which lives and livelihoods depend.
- 4. HACKING Crimes committed with computing technology are more devastating and harder to detect than similar crimes committed without it. A robber who enters a bank and uses a gun gets $2,500ā $5000 on average. The average loss from a computer fraud is more than $100,000. A thief who steals a credit card (or a credit card number) gains access to a much larger amount of money than the thief of the past who stole a wallet containing only cash. A hacker who breaks into a retailerās or bankās computer might steal not one or a dozen but thousands or millions of credit card numbers.
- 5. WHO IS HACKER? A computer hacker is someone who develops, changes or attempts to circumvent computer security hardware or software. Intelligent, having advance knowledge of hardware and software. Can either happen for negative (criminal) or positive reasons. Criminal hackers develop computer malware or spyware to gain access to confidential information.
- 6. TYPES OF HACKING Website Hacking Net Hacking Password Hacking Software Hacking Ethical Hacking Email Hacking Computer Hacking
- 7. WEBSITE HACKING Hacking a website means taking control from the website owner to a person who hacks the website.
- 8. NET HACKING Gathering information about the domain IP address (Address of your computer in the internet) Port (It is logical port on your computer which hacker can use to enter in the system)
- 9. PASSWORD HACKING Password Hacking or Password cracking is the process of recovering secret passwords from data that has been stored in or transmitted by a computer system. Brute force (Hackers try out all the combination of all keyboard letters) Dictionary based (Hackers use predefine passwords. It is unsuccessful method)
- 10. SOFTWARE HACKING In that hackers changes the look & execution way of that software. For example change the demo version into the full version of that software. Modifying existing features of the software.
- 11. ETHICAL HACKING The process in which a person hacks to find weakness in a system and then usually patches them. Can be used to recover lost information where the computer password has been lost. To test security of the system. Also called white hat computer hacking.
- 12. EMAIL HACKING Email hacking is unauthorized access to an email account or email correspondence.
- 13. COMPUTER HACKING Computer Hacking is when files on computer are viewed, created, edited or deleted without authorization.
- 14. HACKER Irresponsible destructive criminal Breaks into computer systems Intentionally release viruses Steal personal & business information Steal money , crash websites & destroy files etc What hackers call themselves?
- 15. PHASE 1ā(1960S AND 1970S) THE JOY OF PROGRAMMING It was a positive term A āhackerā was a creative programmer who wrote very elegant or clever programs. A āgood hackā was an especially clever piece of code. Hackers created many of the first computer games and operating systems. Many were high school and college studentsāor drop- outs. Although they sometimes found ways into systems where they were not authorized users, the early hackers mostly sought knowledge and intellectual challengesāand, sometimes, the thrill of going where they did not belong.
- 16. PHASE 2: 1970S TO THE MID-1990S The meaning of the word āhackerā changed as more people began using computers. breaking into computers for which the hacker does not have authorized access. hacking also included spreading computer viruses, then mostly in software traded on floppy disks. behavior included thefts (of information, software, and sometimes money), Hackers obtained passwords by sophisticated techniques.
- 17. PHASE 2: 1970S TO THE MID-1990S A program known as the Internet Worm demonstrated the vulnerability of the Internet as a whole in 1988. A graduate student at Cornell University wrote the worm and released it onto the Internet. It spread quickly to computers running particular versions of the UNIX operating system, jamming them up and preventing normal processing. The worm affected a few thousand computers (a large portion of the Internet at the time). It took a few days for systems programmers to discover, decode, and rid their systems of the worm. The worm disrupted work and inconvenienced a large number of people. This incident raised concern about the potential to disrupt critical computer services and cause social
- 18. PHASE 2: 1970S TO THE MID-1990S Adult criminals began to recognize the possibilities of hacking. Business espionage and significant thefts and frauds joined the list of hacking activities in the 1980s and 1990s. Russian man, with accomplices in several countries, used stolen passwords to steal $400,000 . He transferred another $11 million to bank accounts in other countries.
- 19. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S Beginning roughly in the mid-1990s, the growth of the Web and the increased use of the Internet for email and other communications, for sensitive information, and for economic transactions made hacking more dangerous and damagingāand more attractive to criminal gangs. The kind of accessible information expanded to include credit reports, consumer profiles, medical records, tax records, confidential business information, and other types of information which are threats to privacy.
- 20. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S With basic infrastructure systems (for example, water and power, hospitals, transportation, emergency services, in addition to the telephone system) accessible on the Net, the risk increased. As the Web spread globally, so did hacking.
- 21. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S Pranksters modified the U.S. Department of Justice Web page to read āDepartment of Injusticeā A teenager crippled a computer system that handled communications between the airport tower and incoming planes at a small airport. Hackers in England impersonated air traffic controllers and gave false instructions to pilots.
- 22. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S In 2000, the āLove Bug,ā spread around the world in a few hours. It destroyed image and music files, modified a computerās operating system and Internet browser, and collected passwords. This virus infected major corporations like Ford and Siemens and 80% of U.S. federal agencies, including the State Department and the Pentagon, along with members of the British Parliament and the U.S. Congress. Many businesses and government agencies had to shut down their email servers. The virus hit tens of millions of computers worldwide and did an estimated $10 billion in damage.
- 23. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S Within about one week, denial-of-service attacks shut down almost a dozen major websites, some for several hours. Victims included Yahoo, eBay, Amazon, EāTrade, Buy.com, CNN, and others. In this kind of attack, hackers overload the target site with hundreds of thousands of requests for Web pages and other information. Programs planted on numerous other systems (many at universities), to disguise their origin, generate the requests. Investigators traced the attack to a 15-year-old Canadian who used the name mafiaboy; he pleaded guilty to a long list of charges. The U.S. government estimated the cost of this incident at $1.7 billion. One disturbing aspect of this case is that mafiaboy apparently did not write the destructive programs himself. He found them on the Net, where other 15-year-olds can find them too.
- 24. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S The purposes and techniques of hacking have shifted as the Web and the amount of stored data of all kinds have grown. Hackers steal millions of credit card numbers from large retailers, restaurant chains, banks, and so on. Some are members of organized crime groups; others sell the numbers to organized crime groups. Some demand extortion payments.
- 25. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S As computer systems replaced human ticket sellers for transportation and other services, hackers found more opportunities for theft. For example, New York City accused several people of stealing $800,000 from the cityās subway system by taking advantage of an error in the software in the machines that sell fare cards. Hackers continue to execute pranks and revenge attacksāsome quite expensive. Hackers modified the programming at an online gambling site so that everyone won. The site lost $1.9 million.
- 26. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S As social networks grew, they became targets of hackers. In 2011, hackers gained access to Facebook member profile pages. The hackers had tricked members into running malware. It is a common tactic for hackers to create fake offers of discounts, freebies, or just something funny or interesting. Clicking on it initiates the malware. Similar attacks encourage a social media friend to view a video. The video site indicates that the user must install software to view the clip; that software is malware. Social networks offer a huge pool of potential victims who are used to sharing.
- 27. PHASE 3: THE GROWTH OF THE WEB AND MOBILE DEVICES-MID 1990S Hacking of mobile devices (other than stolen laptops) has not yet been a major problem but smartphones acting as electronic wallets and tablets synching to all oneās data in clouds, they will be attractive targets.
- 29. Cannot immediately differentiate between a non-malicious hacker and a spy/thief /terrorist Uncertainty about intruderās intentions ļ harm, expense Example Boeing , National weather service computers Hackers with good intentions can also make unintentional mistakes and can cause significant damage
- 30. HACKTIVISM-POLITICAL HACKING Pro drug message on a police website Disabling a website of real state agent Civil disobedience ?? Is it freedom of speech? ļ Crashing or defacing a website ??
- 31. IDENTITY THEFT AND CREDIT CARD FRAUD Stealing Identities: Identity Theft āvarious crimes in which a criminal or large group uses the identity of an unknowing, innocent person ļ Use credit/debit card numbers, personal information, and social security numbers ļ E-commerce has made it easier to steal card numbers and use without having the physical card
- 32. IDENTITY THEFT AND CREDIT CARD FRAUD (CONT.) Techniques used to steal personal and financial information ļ Phishing - e-mail fishing for personal and financial information disguised as legitimate business e-mail ļ Smishing- spam in case of text messages ļ Vishing ?? ļ Pharming - false Web sites that fish for personal and financial information by planting false URLs in Domain Name Servers ļ Online resumes and job hunting sites may reveal SSNs, work history, birth dates and other information that can be used in identity theft
- 33. IDENTITY THEFT AND CREDIT CARD FRAUD (CONT.) Techniques used to protect personal and financial information ļ Activation for new credit cards ļ Retailers do not print the full card number and expiration date on receipts ļ Software detects unusual spending activities and will prompt retailers to ask for identifying information ļ Customers home computer ļ Image based verification ļ Geographic location
- 34. IDENTITY THEFT AND CREDIT CARD FRAUD (CONT.) Biometrics: Biological characteristics unique to an individual They include fingerprints, voice prints, face structure, hand geometry, eye (iris or retina) patterns, and DNA. Uses of DNA in the law enforcement and justice systems are well known. DNA matching has freed numerous innocent people mistakenly convicted of such serious crimes as murder. Along with fingerprints, DNA has been extremely effective for identifying or eliminating suspects in crimes. No external item (card, keys, etc.) to be stolen Used in areas where security needs to be high, such as identifying airport personnel Biometrics can be fooled, but more difficult to do so, especially as more sophisticated systems are developed