COMPUTER CRIME

1
COMPUTER CRIME

• An Overview

2
Agenda

• Background and History
• Potential Criminals
• Ethics Survey
• Criminal Activity
• Preventative Measures

3
Evolution of the Information Age
I. Background History

• Growth Projections
• Internet
• The Inevitable

4
Escalation and Frequency
I. Background History

• 5-year increase

5
Escalation and Frequency
I. Background History

• FBI Computer Crimes
• Division Reports
• 15 security breaches every day
• 75 annual increase in recent years

6
Escalation and Frequency
I. Background History

• Department of Defense Study

1072
7470
7860

390
of successful system attacks (8932 attempts)
of detections (out of 7860 successful attempts)
7
Intrusion Costs
I. Background History

• Ernst and Young Survey
• More than 1/2 incurred a loss
• Each loss exceeded 100,000
• Seventeen losses exceeded 1,000,000

8
Case Study
I. Background History

• Hacker Penetrates Citibank System

9
Case Study
I. Background History

• Hacker Penetrates Citibank System

• The criminals
• The crime
• The result

10
Employees/Ex-employees
II. Potential Criminals

• Users
• Analysts
• Programmers

20
80

• of crimes committed

11
Case Study
III. Ethics Survey

• Agreeing
  Agreeing
• 1. A person is justified 11 5
• in making copies of
• employers software.
• 2. I would copy software 75 41
• (illegally) for my use.
• 3. A user is justified in 6 3
• accessing / using the
• services ( of another
• companys computer )
• to his advantage.

Agreeing
Agreeing 1. A person is justified
11 5 in making copies of employers
software. 2. I would copy software 75 41 (ill
egally) for my use. 3. A user is justified in
6 3 accessing / using the services ( of
another companys computer ) to his advantage.
12
Case Study
III. Ethics Survey

• Agreeing
  Agreeing
• 4. I would crack a com- 15 7
• puter if I knew how.
• 5. There is nothing wrong 21 10
• in writing a virus program
• to output the message
• Have a nice day.
• 6. Management can be so 15 7
• unfair at times that a
• person can be justified in
• erasing files.

13
Case Study
III. Ethics Survey

• Agreeing
  Agreeing
• 7. I would adjust a 15 7
• system to avoid an
• account service charge
• for an overdrawn
• checking account.
• 8. There is nothing wrong 13 6
• with cracking another
• companys computer to
• identify other customers
• to sell to.

14
Hacking
IV. Criminal Activity
The technical-minded crime
15
Viruses
IV. Criminal Activity

• Nondestructive or
• Malevolent

16
Trojan Horse
IV. Criminal Activity

• History
• Vehicle for viruses and logic bombs

17
Fraud and Abuse
IV. Criminal Activity

• Case Studies

• Race Track Trifecta
• Huntsville Prison
• Robin Hood of Northwest

18
Theft
IV. Criminal Activity

• Unauthorized software duplication

19
Corporate Espionage
IV. Criminal Activity

• Increasing
• Threat

20
Sabotage
IV. Criminal Activity
25
75

• 25 of all crime committed

21
Education and Training
V. Preventative Measures

• A Logical First Step

22
Education and Training
V. Preventative Measures

• 10 Suggestions from Ernst and Young
• Confidentiality Statements
• Regular Back-Ups
• Policies and Procedures
• Control Intranet Access.
• Boot-level Passwords

23
Education and Training
V. Preventative Measures

• 10 Suggestions from E Y (continued)
• Control Internet Access
• Restrict Use of Internet
• Classify Data
• Secure All Computers
• Require file-level Passwords

24
Software
V. Preventative Measures

• A Variety to Choose From
• Positive Results
• Indianapolis Power Light case study

25
Legal Ramifications
V. Preventative Measures

• A Better Prepared Law Enforcement
• New Laws With Harsher Penalties