An ethical hacker makes multiple guesses at the admin password for a local school's web-server but is ultimately unsuccessful. Is this an offence, under the Computer Misuse Act (1990), and its later revisions? Yes, under section 2: Unauthorised Access with Intent Yes, under section 3A: Misuse of Tools Yes, under section 1: Unauthorised Access No, not technically Yes, under section 3ZA: Misuse of Tools for critical infrastructure

An ethical hacker makes multiple guesses at the admin password for a local school's web-server but is ultimately unsuccessful. Is this an offence, under the Computer Misuse Act (1990), and its later revisions? Yes, under section 2: Unauthorised Access with Intent Yes, under section 3A: Misuse of Tools Yes, under section 1: Unauthorised Access No, not technically Yes, under section 3ZA: Misuse of Tools for critical infrastructure

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter2: Compliance: Law And Ethics

Section: Chapter Questions

Problem 1EDM

See similar textbooks

Similar questions

Downloading software that turns unprotected computers into zombies is necessary for a distributed denial-of-service attack to be successful, and the hacker who is behind it must be malicious. Should owners of zombie computers be fined or subjected to some other form of punishment in order to encourage increased computer security? So, why?
For a distributed denial of service attack to be effective, the hacker must first download malware that turns vulnerable machines into zombies. Should those who allow their computers to become "zombies" be penalized in order to increase online safety? So, why?
A malevolent hacker must download malware that turns unprotected machines into zombies in order to launch a successful distributed denial-of-service assault. Should those who allow their computers to become "zombies" be penalized in order to increase online safety? So, why?
Martin had registered two domain names that contain words identical to Dream Works, and he claimed that the said websites are used as educational websites that provide English language training. Still, later he was selling the rights to Dream Works. Evidence presented in court showed that Martin never used the disputed domain names. The court then concluded that it was a cybersquatting case. Which of the following instances were committed that made the act punishable? A. Purpose is to profit, mislead, destroy reputation, and deprive others from registering the same. B. The acquisition of a domain name over the internet in bad faith. C.Identical or in any way similar with the name of a person other than the registrant D.Acquired without right or with intellectual property interests in it.
The malevolent hacker must download malware that turns unprotected machines into zombies in order to carry out a successful distributed denial-of-service attack. Should zombie computer owners face fines or other penalties to promote higher levels of computer security? So, why?
Suppose Charlie had installed key logger software on all company computer systems and had made a copy of Peter's encryption key. Suppose that Charlie had this done without policy authority and without anyone's knowledge, including Peter's. Would the use of such a tool be an ethical violation on Charlie's part? Is it illegal? Suppose that Charlie had implemented the key logger with the knowledge and approval of senior company executives, and that every employee had signed a release that acknowledged the company can record all information entered on the company systems. Two days after Peter's call, Charlie calls back to give Peter his key: "We got lucky and cracked it early." Charlie says this to preserve Peter's illusion of privacy. Is such a "little white lie" an ethical action on Charlie's part?
Give an example of a situation in which managing user accounts was difficult. Several different methods of authentication should be listed. Password protection seems to be losing its relevance.
First, argue for the best information security practice, whether a block cipher or stream cipher should be used to encrypt a video data file sent through the internet as part of a major, successful entertainment service. The entertainment company has a large market share, and ample resources. Secondly, argue for the most secure choice of which kind of cipher should be used for the authentication exchange between the user and the entertainment service web portal. The entertainment service is expensive to the customer, and users are wary of the misuse of their accounts. Consider the nature of the traffic and its pattern, and the nature of the keys to use.
For a distributed denial of service attack to be effective, the hacker must first download malware that turns vulnerable machines into zombies. Should those who allow their computers to be used as zombies to be penalized in any way? So, why?
a. Intrusion detection is based on the assumption that the behavior of the intruder differs from that of a legitimate user in ways that can be quantified. Of course, we cannot expect that there will be a crisp, exact distinction between an attack by an intruder and the normal use of resources by an authorized user. This poses a challenge to the use of IDS. Briefly discus the challenges and propose a cure. b. Blockchain is a breakthrough technology that is expected to alter most industries in the coming years and it particularly touted so because of confidentiality, authentication and integrity that it offers which makes it independent, transparent and secure. Experts says that these important principles of security are achievable because blockchains employs hash functions and public key encryption. Briefly discuss how these cryptographic techniques offer confidentiality, authentication and integrity that gives blockchain its security.
Exists a drawback to employing multiple user authentication methods? Then, what measures does it take to safeguard compromised accounts?
A company sells products through its webpage. An attacker finds a way to inject commands into their website and retrieve information. The company stores its data unencrypted and uses a weak password for the main server. The company lost major customers’ information due to a hacking incident. From the above scenario, A. Which CIA security model elements were affected in this scenario? a.Define and identify the threat, vulnerability, and impact in this scenario? b.Suggestsome security controls, at least 3, that can be used to secure the system.