IT550 Assignment Unit 1 Kaplan University As the digital age progresses, more and more business is conducted electronically. Symbiotically illegal activities of those that wish to prosper from security vulnerabilities will increase. Cybercrime can be motivated by a number of factors including terrorism. Cyberterrorism is any terrorist act that uses computers as the vehicle for their attack. Cyber terrorists can be motivated to target organizations that will result in the radical’s group to cause the most harm and/or receive the most attention for their party.
Internal attacks can be more difficult to find as attackers have the potential to remove any evidence of the attack more easily as they have more knowledge or access rights on the system as opposed to an outside attack. Attacks can be administrated via removable devices such as a USB that could contain some form of malware on it such as a virus. Most internal attacks are conducted by unhappy employees who want to disrupt the organisation by using the knowledge they obtained in the organisation, against the organisation. Additionally, the employee may want to gain access to important data in order to infiltrate and sell the information onto another competing organisation. The
Not to mention WIRETIME is unethical in their actions. Computer hacking is considered criminalizing under The Computer Fraud and Abuse Act. Under this, BUGusa would have the right to obtain compensatory damages and court ordered relief or other just relief. Steven and WIRETIME may be sued for the executed plot performed because it is unlawful to purposely access computer information without authority to do so, under section 1030 (a)(2) – Unlawful Access to Obtain Information. If he is caught in the act, he can be charged under Uniform Trade Secrets Act.
Companies such as this are required not only legally, but ethically to protect the customers’ private information or be held accountable by law. It is also bad practice to allow this sensitive information to be disseminated and stolen by cyber criminals. Since this kind of data must be protected at all costs, certain regulations were put in place so that standards for information security could be monitored. One of these standards is that all personal information is to be encrypted when being sent over the internet and also on the servers. This will make it much harder for the hacker to access the information easily.
The risks that exist would come from a suspecting end-user, potentially some form of malware, that would be installed through an open port, thus causing the integrity of a machine on that network to be severely compromised (Lawrence, 2000). Ping sweeps and port scans are two direct unsuspecting threats that, like other cyber threats, are not to be ignored. The ease of gaining access by using these threat sources is something that a business should be aware of and be prepared to address when faced with being at the end of a cyber-attack. Implementing appropriate policy to counteract such a malicious and serendipitous attack on network vulnerabilities should be considered as an additional failsafe. Protection is the key and showing extra caution can at least reduce the
Since confidentiality is an issue, smartphone transmissions signals can be hacked by accidental broadcast. Third party snooping, can hack blue tooth signals that transmit confidential information. Stolen phones create a threat to business and the community through fraud. Training employees can be a measure to minimize the risks that poses a threat to cell phones. Some measures to help in information security could be aimed to data encryption, passwords, software, network security solutions and service companies offering voice encryption.
Two basic approaches are used in deliberate attacks on computer systems: data tampering and programming attack. Data tampering is a common means of attack that refers to an attack when someone enters false, fabricated or fraudulent data into a computer or changes or deletes existing data. This is the method often used by insiders and fraudsters and is extremely serious because it may not be detected. Programming attacks are popular with computer criminals that use programming techniques to modify other computer programs. For these types of crimes, programming skill and knowledge of the targeted systems are needed.
Unit 9 Assignment 1: List Phases of a Computer Attack In this assignment I am a hacker who needs to protect my organization from a computer attack. I will list general phases of a computer attack. We have an organization that we need to protect from outside attacks by foreign parties. I am an ethical hackers who needs to take preventative measures in order to adequately secure the network against these attacks. Many attackers follow a general set of steps in order to gain the permissions necessary to break into a system.
Top management must make a commitment to defend against computer crime. Where would the law enforcement agency find expertise in the field of computer crime that they could use to assist with investigations? The National Institute of Justice’s National Law Enforcement and Corrections Technology Center (NLECTC) are a resource for training and preparations for law enforcement agencies. CART-FBI Computer Analysis Response Team- helps in writing, serving search warrants, seizing and entering evidence, they do routine examination of digital evidence for local law enforcements and federal agents. Cyber Incident Detection and Data Analysis Center (CIDDAC) - help protect private sector networks with real time cyber attack detection sensors.
Cyber stalking resembles the definition of stalking except the use of video, digital cameras, bugs, and global positioning system (GPS). This often leads victims of stalking a lifetime of fear and anxiety. The resources available for after-care support for victims are at risk with the economical downfall the government has