Exam 3: Computer and Internet Crime

____ is an annual gathering in Las Vegas of computer hackers.

Individuals committed to trustworthy computing take a pledge to not send viruses and worms and to refrain from spamming others.

Often a successful attack on an information system is due to poor system design or implementation. Once such a vulnerability is discovered, software developers quickly create and issue a ____ to eliminate the problem.

Spammers can defeat the registration process of free e-mail services by launching a coordinated ____ attack that can sign up for thousands of untraceable e-mail accounts.

The security of any system or network is a combination of technology, policy, and people and requires a surprisingly narrow range of activities to be effective.

Identify and briefly discuss four reasons that the number, variety, and impact of security incidents is increasing.

A distributed denial-of-service attack keeps the target so busy responding to a stream of automated requests that legitimate users cannot access the target.

The cost to repair the worldwide damage done by a computer worm has exceeded $1 billion on more than one occasion.

A card, similar to a debit or credit card which contains a memory chip that is updated with encrypted data every time the card is used is called a ____________________.

Discussing security attacks through public trials and the associated publicity has not only enormous potential costs in public relations but real monetary costs as well.

Due to time and resource limitations, most organizations choose to focus on those computer threats that have a ____________________ frequency (relative to all other threats) and a high impact (relative to all other threats).

Crackers break into other people's networks and systems to cause harm-defacing Web pages, crashing computers, and spreading harmful programs or hateful messages.

A strong security program begins by ____.

According to a 2008 CSI Computer Crime and Security Survey, 53 percent of the responding organizations spend 5 percent or less of their overall ____________________ on information security.

The impact of a worm attack on an organization's computers and personnel can be considerable and results in losses of many thousands of dollars. Identify and briefly discuss the kinds of losses an organization can suffer.

The sending of fraudulent e-mails to the employees in a specific organization in an attempt to gain personal information is called ____________________.

The use of legal techniques to gather information that is publicly available in order to learn about a competitor is called ____________________.

The Computer Fraud and Abuse Act addresses identity theft.

State the purpose of an IT security audit and briefly discuss the key elements of such an audit.

Unlike a computer worm, which requires users to spread infected files to other users, a virus is a harmful program that resides in the active memory of the computer and duplicates itself. A virus can propagate without human intervention.