# data[].attributes.headline
1. Briefly explain the following computer crimes.

# data[].attributes.subject
1. Briefly explain the following computer crimes.

# data[].attributes.body
a.Sniffer – it is eavesdropping program that monitors information traveling over networks. It also enables hackers to steal proprietary information like email, company files and others.

b.Phishing – it is setting up fake Web sites or sending email messages that look like legitimate business to ask users for confidential personal data.

c.Pharming – it redirects users to a bogus Web page, even when individual types correct Web page address into his or her browser.

d.Spoofing – it misrepresenting oneself by using fake email addresses or masquerading as someone else. It also redirecting Web link to address different from  intended one, with site masquerading as intended destination.

# data[].attributes.headline
2. a)  Distinguish the TWO (2) methods for encrypting network traffic on the Web.

# data[].attributes.subject
2. a)  Distinguish the TWO (2) methods for encrypting network traffic on the Web.

# data[].attributes.body
- TLS is a cryptographic protocol that provides end-to-end communications security over networks and is widely used for internet communications and online transactions. It is an IETF standard intended to prevent eavesdropping, tampering and message forgery. Common applications that employ TLS include Web browsers, instant messaging, e-mail and voice over IP.

- SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers.

# data[].attributes.headline
2.b)  Briefly explain the following terms.

# data[].attributes.subject
2.b)  Briefly explain the following terms.

# data[].attributes.body
i. Cyber warfare - Cyber warfare includes the activities by a country state or global association to assault and endeavor to harm another country's PCs or data organizes through, for instance, PC infections or refusal of-benefit assaults. RAND research provides recommendations to military and regular citizen chiefs on strategies for shielding against the harming impacts of digital fighting on a country's advanced framework.
ii. Computer Forensic - Computer forensics is the practice of collecting, analyzing and reporting on digital data in a way that is legally admissible. It can be used in the detection and prevention of crime and in any dispute where evidence is stored digitally. Computer forensics follows a similar process to other forensic disciplines, and faces similar issues.

# data[].attributes.headline
3.a) Without protection against malware and intruders, connecting to the Internet could be very dangerous. Firewalls, intrusion detection system and antivirus software have become the tools to overcome this problem. Briefly explain these THREE (3) tools.

# data[].attributes.subject
3.a) Without protection against malware and intruders, connecting to the Internet could be very dangerous. Firewalls, intrusion detection system and antivirus software have become the tools to overcome this problem. Briefly explain these THREE (3) tools.

# data[].attributes.body
1.Firewalls

Combination of hardware and software that prevents unauthorized users from accessing private networks whereby it consists of Static packet filtering, Stateful inspection, Network address translation (NAT), and Application proxy filtering.

2.Intrusion Detection System

Monitoring hot spots on corporate networks to detect and deter intruders and examines events as they are happening to discover attacks in progress.

3.Antivirus Software

Checks computers for presence of malware and can often eliminate it as well whereby it requires continual updating.

# data[].attributes.headline
3. b) Information systems controls is one of the components of an organizational framework for security and control. Information systems controls consist of two - general and application control. A company must know how and where to deploy security tools and security personnel must know what controls a company must have in place to protect its information system. Contrast between General Controls and Application Controls.

# data[].attributes.subject
3. b) Information systems controls is one of the components of an organizational framework for security and control. Information systems controls consist of two - general and application control. A company must know how and where to deploy security tools and security personnel must know what controls a company must have in place to protect its information system. Contrast between General Controls and Application Controls.

# data[].attributes.body
1.General control – It govern design, security and use of computer programs and security of data files in general throughout organization’s information technology infrastructure. It also apply to all
computerized application.  General control also combination of hardware, software and manual procedures to create overall control environment.

2. Application control – it specific controls unique to each computerized application like payroll and order processing. It include both automated and manual procedures which to ensure that only authorized data are completely and accurately processed by that application.

# data[].attributes.headline
4 .Malicious Software programs are referred to as Malware. Describe FOUR (4) types of malicious software. 

# data[].attributes.subject
4 .Malicious Software programs are referred to as Malware. Describe FOUR (4) types of malicious software. 

# data[].attributes.body
1.Viruses. Rogue software program that attaches itself to other software programs or data files in order to be executed.

2.Worms. Independent programs that copy themselves from one computer to other computers over a network.

3.Trojan horses. Software that appears benign but does something other than expected. For example, Zeus Trojan that runs on computers with MS Windows OS were used to steal login credentials for banking.

4.Spyware. Small programs install themselves surrptitiously on computers to monitor user web surfing activity and serve advertising.

# data[].attributes.headline
5.a) Nowadays securing information systems has become an important issue in organization to protect itself against computer crime. Define computer crime and provide an appropriate example. 

# data[].attributes.subject
5.a) Nowadays securing information systems has become an important issue in organization to protect itself against computer crime. Define computer crime and provide an appropriate example. 

# data[].attributes.body
Computer crime can be defines as any violations of criminal law that involve a knowledge of computer technology for their perpetration, investigation, or prosecution. For example, they will be using computer as their instrument to be a theft of trade secrets and using e-mails for threats or harassment where this can be called as identity theft where they will theft of personal information such as security ID.

# data[].attributes.headline
5b) Briefly explain THREE (3) reasons why information systems are vulnerable to destruction, error and abuse? 

# data[].attributes.subject
5b) Briefly explain THREE (3) reasons why information systems are vulnerable to destruction, error and abuse? 

# data[].attributes.body
1. Accessibility of networks where everyone at anytime can access with the system.

2. Wi-Fi networks can easily be penetrated by intruders using sniffer programs to obtain an address to access the resources of the network.

3. Software presents problems because software bugs may be impossible to eliminate and because software vulnerabilities can be exploited by hackers and malicious software.

# data[].attributes.headline
5.c) Discuss the THREE (3) most important tools and technology for safeguarding information resources. 

# data[].attributes.subject
5.c) Discuss the THREE (3) most important tools and technology for safeguarding information resources. 

# data[].attributes.body
1. Firewall. It prevents the accesses of private network or systems when connected to the internet from the unauthorized users.

2. Intrusion detecting systems. Monitors the private networks and provides access to the corporate systems.

3. authentication techniques. Provides authentication by passwords, tokens, biometric and smart card.

# data[].attributes.headline
6.a) Identity management software automates the process of keeping track of all information systems users and their system privileges, assigning each user a unique digital identity for accessing each system. 

# data[].attributes.subject
6.a) Identity management software automates the process of keeping track of all information systems users and their system privileges, assigning each user a unique digital identity for accessing each system. 

# data[].attributes.body
Authentication is the  process or action of verifying the identity of a user or process.

# data[].attributes.headline
6.b) Identify and briefly describe FOUR (4) authentication technologies. 

# data[].attributes.subject
6.b) Identify and briefly describe FOUR (4) authentication technologies. 

# data[].attributes.body
1. Iris scanner. An iris scan is a highly secure way to verify a person’s identity, even more so than a fingerprint scan or voice pattern recognition.

2. Voice Recognition Security System.Voice biometric authentication identifies an individual based on the patterns unique to each person’s voice.

3. Palm Vein Pattern Authentication.The system records the pattern of veins in the hand, and is safe and accurate. The user does not need to directly touch the device.

4. Facial Recognition.A biometric software application capable of uniquely identifying or verifying a person by comparing and analyzing patterns based on the person's facial contours

# data[].attributes.body
A type of malicious software designed to block access to a computer system until a sum of money is paid.The motive for ransomware attacks is nearly always monetary, and unlike other types of attacks, the victim is usually notified that an exploit has occurred and is given instructions for how to recover from the attack. Payment is often demanded in a virtual currency, such as bitcoin

# data[].attributes.headline
7. b) State how do we prevent and protect our computer from ransomware.

# data[].attributes.subject
7. b) State how do we prevent and protect our computer from ransomware.

# data[].attributes.body
1. Do make sure that all systems and software are up-to-date with relevant patches

2.Use reputable antivirus software and a firewall.

# data[].attributes.headline
7.c) Discuss the effects of computer crime to an organization. 

# data[].attributes.subject
7.c) Discuss the effects of computer crime to an organization. 

# data[].attributes.body
A company suffers losses due to computer crime when a hacker steals confidential information and future plans of the company. And he simply sells the information to a competitor company and they use the information to get benefits. Wastage of time is another problem because many IT personals spend a lot of time on handling harmful incidents which may be caused due to computer crimes. This time should be spend on the development. And if the company is attacked by a computer criminal it would cost a lot and much time is needed to recover from the loss.

# data[].attributes.headline
Chapter 7: Securing Information Systems                                                   1. Security isn’t simply a technology issue, it’s a business issue. Discuss.

# data[].attributes.subject
Chapter 7: Securing Information Systems                                                   1. Security isn’t simply a technology issue, it’s a business issue. Discuss.

# data[].attributes.body
Security become a business issue because all organisations depend on a wide variety of IT systems to enable and support their business processes. This ranges from email and instant messenger for communication, to document management systems for collaboration, to ERP systems for performing integrated business processes.

# data[].attributes.headline
2. Who poses the biggest security threat: insiders or outsiders? 

# data[].attributes.subject
2. Who poses the biggest security threat: insiders or outsiders? 

# data[].attributes.body
Outsiders are more likely to act in a malicious way with a company’s data, but the source of the greatest risk is nearly always the insiders. Outside bad-actors are constantly looking for weaknesses to exploit, and the greatest vulnerability is typically careless or misguided actions by insiders. When insiders fail to be vigilant about protecting the fort, they fall victim to phishing schemes or social engineering attacks, or they open emails they don’t recognize, or they access corporate systems while sitting in an internet cafe or any one of the myriads of careless behaviors that create vulnerabilities. It is the insiders that provide opportunities for outsiders to storm the gates and cause damage.

# data[].attributes.headline
3. Suppose your business had an e-commerce Web site where it sold goods and accepted credit card payments. Discuss the major security threats to this Web site and their potential impact. What can be done to minimize these threats? 

# data[].attributes.subject
3. Suppose your business had an e-commerce Web site where it sold goods and accepted credit card payments. Discuss the major security threats to this Web site and their potential impact. What can be done to minimize these threats? 

# data[].attributes.body
E-commerce websites are vulnerable to fraud from internal and external sources. Fraud incidents include credit card fraud, which exposes the website to threat from clients and any other external sources and internal fraud. Any fraudulent transactions being entered into the system from employees. Such transactions can also be introduced into the system by hackers or Trojan Horses, which resemble the real customers’ transactions. To prevent fraud, Fraud scoring must be used. It is a system of predictive fraud detection models or technologies that payment processors use to identify the highest-risk transactions in card-not-present environment that require additional verification. All card-not-present transactions must be authorized before they are processed. The authorization response will typically be approval or decline. You should develop a process for handling transactions after the authorization response has been received and apply it consistently.

# data[].attributes.headline
Case Study :1.Is cyberwarfare a serious problem? Why or why not?

# data[].attributes.subject
Case Study :1.Is cyberwarfare a serious problem? Why or why not?

# data[].attributes.body
Cyber warfare is becoming a very serious problem. Attacks have become much more widespread, sophisticated, and potentially devastating. The U.S. Department of Defense networks experience 250,000 probes every hour and cyber attacks on U.S. federal agencies in general have increased 150 percent since 2008. Cyberwarfare comes in the form of distributed denial-of-service attacks that have taken down Websites at the White House, the Treasury, the Federal Trade Commission, the Defense Department, the Secret Service, and many others. The

attacks slowed down most of the U.S. sites and forced several sites in foreign countries to stop operating altogether. Over the years, hackers have stolen plans for missile tracking systems, satellite navigation devices, surveillance drones, and leading-edge jet fighters.

# data[].attributes.headline
2. What solutions are available for this problem? Do you think they will be effective? Why or why not?

# data[].attributes.subject
2. What solutions are available for this problem? Do you think they will be effective? Why or why not?

# data[].attributes.body
The solution that the country must take to prevent from this problem is Computer crimes or rules should therefore be established, maybe in combination with an organization monitoring the cyberspace, with large and serious consequences against states violating these rules. Cyber weapons won’t go away and their spread can’t be controlled. Instead, as we’ve done for other destructive technologies, the world needs to establish a set of principles to determine the proper conduct of governments regarding cyber conflict. They would dictate how to properly attribute cyber-attacks, so that we know with confidence who is responsible, and they would guide how countries should respond.