CHAPTER 5 & 6 by Wiwied Virgiyanti

1. How has the term “hacker” evolved since the 1950s?

drwiwiedvirgiyanti — 2024-05-02 06:10:46 UTC

2. Describe three “low-tech” methods that hackers have used to obtain login names and passwords.

drwiwiedvirgiyanti — 2024-05-02 06:11:03 UTC

3. What is the maximum penalty for violating the Computer Fraud and Abuse Act?

drwiwiedvirgiyanti — 2024-05-02 06:11:24 UTC

4. Why is it dangerous to surf the Web using an open Wi-Fi network; that is, one that does not require a password?

drwiwiedvirgiyanti — 2024-05-02 06:11:44 UTC

5. Define the following terms in your own words: Adware, Backdoor Trojan, Bot, Botnet, Cross-site scripting, Drive-by download, Rootkit, Spyware, Trojan horse, Virus, and Worm.

drwiwiedvirgiyanti — 2024-05-02 06:13:04 UTC

6. Why is it dangerous for an email program to open attachments automatically, without waiting for the user to select them?

drwiwiedvirgiyanti — 2024-05-02 06:13:51 UTC

7. Soon after the Internet worm was released, Andy Sudduth sent out an email explaining how to stop the worm. Why was this email of no help to the system administrators fighting the spread of the worm?

drwiwiedvirgiyanti — 2024-05-02 06:14:08 UTC

8. In your own words, define each of these terms: Denial-of-service attack, Distributed denial-of-service attack, Phishing, Spear phishing, and SQL injection.

drwiwiedvirgiyanti — 2024-05-02 06:14:58 UTC

9. Give two (2) examples of how criminal organizations have used the Internet to make money.

drwiwiedvirgiyanti — 2024-05-02 06:16:10 UTC

10. What is a cyber attack?

drwiwiedvirgiyanti — 2024-05-02 06:16:30 UTC

11. If converting SCADA systems to the Internet protocol increases the risk of a hacker taking control of an industrial process, why are companies converting SCADA systems to IP?

drwiwiedvirgiyanti — 2024-05-02 06:17:02 UTC

12. What did the Stuxnet worm do?

drwiwiedvirgiyanti — 2024-05-02 06:17:33 UTC

13. Explain two different ways a vote thief could cast multiple votes in an online election.

drwiwiedvirgiyanti — 2024-05-02 06:17:50 UTC

14. In a study done in London, people in subway stations were offered a cheap pen in return for disclosing their passwords. About 90 percent offered their passwords in return for the pen. What can be done to get people to take security more seriously?

drwiwiedvirgiyanti — 2024-05-02 06:18:15 UTC

15. Email viruses are typically launched by people who modify header information to hide their identity. Bright mail’s Enrique Salem says that in the future, your email reader will authenticate the sender before putting the message in your inbox. That way, you will know the source of all the emails you read. Alan Nugent of Novell says, “I’m kind of a fan of eliminating anonymity if that is the price for security”. Will eliminating anonymity make computers more secure?

drwiwiedvirgiyanti — 2024-05-02 06:19:01 UTC

16. Are there conditions under which the release of a worm, virus, or Trojan horse would be morally justifiable?

drwiwiedvirgiyanti — 2024-05-02 06:19:34 UTC

17. When his worm program did not perform as expected, Robert Morris Jr. contacted two old friends from Harvard to decide what to do next. One of them, Andy Sudduth, agreed to email an anonymous message apologizing for the worm and describing how to protect computers from it, without disclosing Morris as the creator of the worm. Was this the right thing for Sudduth to do?

drwiwiedvirgiyanti — 2024-05-02 06:20:18 UTC

18. Kalamazoo College requires that all computers connected to the campus network be running up-to-date antivirus software. When a student’s computer is discovered to have a virus, its network connection is cut until a staff member can remove the virus. If it turns out that the computer was not running up-to-date antivirus software, the student is fined $100. Is this a morally justifiable policy?

drwiwiedvirgiyanti — 2024-05-02 06:20:55 UTC

19. Adam and Charlene are good friends. Both attend East Dakota State University. One day when Adam is off campus interviewing for a part-time job, someone asks him how many credit hours of computer science courses he has completed. Adam calls Charlene and asks her to access his student records by logging into the campus mainframe as if she were Adam.

drwiwiedvirgiyanti — 2024-05-02 06:21:27 UTC

He provides Charlene with his student identification number and password so that she can do this. Is it wrong for Adam to share this information with Charlene? Is it wrong for Charlene to retrieve this information for Adam?

20. Carnegie Mellon University, Harvard University, and the Massachusetts Institute of Technology denied admission to more than 100 business school applicants because they took an online peek at the status of their applications. These students learned how to circumvent the program’s security, and they used this knowledge to view their files and see if they had been accepted.

drwiwiedvirgiyanti — 2024-05-02 06:22:30 UTC

Students could see information about their own application, but could not view the status of other students’ applications. In many cases the students learned that no admission decision had yet been made. Do you feel the response of these universities was appropriate?

21. Millions of American homes are equipped with wireless networks. If the network is not made secure, any nearby computer with a wireless card can use the network. The range of home wireless networks often extends into neighboring homes, particularly in apartment complexes. If your neighbor’s wireless network extends into your home, is it wrong to use that network to get free Internet access?

drwiwiedvirgiyanti — 2024-05-02 06:22:47 UTC

22. Is it morally acceptable to use a denial-of-service attack to shut down a Web server that distributes child pornography?

drwiwiedvirgiyanti — 2024-05-02 06:23:07 UTC

23. Some would argue that technological development is inevitable. If Butler had not created Firesheep, someone else would have. Every invention can be put to good or bad uses. Therefore, creators of new technologies bear no moral responsibility for their inventions.

drwiwiedvirgiyanti — 2024-05-02 06:23:55 UTC

In contrast, the author argues that people who create a tool making it easier for someone to do something immoral share some moral accountability for the misdeeds done by people using the tool. Which perspective do you find more compelling?

24. Suppose it is true that Israeli Defense Forces were responsible for unleashing the Stuxnet worm, which caused a temporary shutdown of Iran’s nuclear program by damaging centrifuges processing uranium. Was unleashing this worm morally justifiable?

drwiwiedvirgiyanti — 2024-05-02 06:24:29 UTC

25. Do you agree with the author that it is a bad idea for a government to allow online voting from home computers?

drwiwiedvirgiyanti — 2024-05-02 06:25:34 UTC

26. Debate this proposition: Those who create nondestructive malware are doing the computer industry a favor because the patches created to block them make computers more secure. To use an analogy, each virus has the effect of strengthening the immune systems of the computers it targets.

drwiwiedvirgiyanti — 2024-05-02 06:26:02 UTC

27. The University of Calgary offered a senior-level computer science course called “Computer Viruses and Malware.” The course taught students how to write viruses, worms, and Trojan horses. It also discussed the history of computer viruses and taught student show to block attacks. All course assignments were done on a closed computer network isolated from the Internet.

drwiwiedvirgiyanti — 2024-05-02 06:26:55 UTC

Some computer security experts criticized the university for offering the course. One researcher said, “No one argues criminology students should commit a murder to understand how a murderer thinks”. Debate whether the University of Calgary was wrong to offer the course.

28. Debate this proposition: It is wrong for a company to hire a former malicious hacker as a security consultant.

drwiwiedvirgiyanti — 2024-05-02 06:27:19 UTC

29. A distributed denial-of-service attack makes the Web site for a top electronic retailer in accessible for an entire day. As a result of the attack, nearly a million customers were inconvenienced, and the retailer lost millions of dollars in sales to its competitors. Law enforcement agencies apprehend the person who launched the attack. Should the punishment be determined strictly by considering the crime that was committed, or should the identity of the culprit be taken into account?

drwiwiedvirgiyanti — 2024-05-02 06:30:14 UTC

If the identity of the perpetrator should be taken into account, what punishment do you think would be appropriate if he were: a). A teenager who launched the attack out of curiosity; b). An adult dedicated to fighting the country’s overly materialistic culture; c). A member of a terrorist organization attempting to harm the national economy.

30. Why the United States should work to create an international ban on cyber attacks, analogous to the Chemical Weapons Convention, that outlaws the production and use of chemical weapons? Why the United States should strive to become preeminent in cyber attack technology?

drwiwiedvirgiyanti — 2024-05-02 06:31:51 UTC