Essay/Term paper: Computer crime

Essay, term paper, research paper:  Information Technology

Computer Crime


Computer crimes need to be prevented and halted thought increased
computer network security measures as well as tougher laws and enforcement of
those laws in cyberspace:

Computer crime is generally defined as any crime accomplished through
special knowledge of computer technology. All that is required is a personal
computer, a modem, and a phone line. Increasing instances of white-collar crime
involve computers as more businesses automate and information becomes an
important asset. Computers are objects of crime when they or their contents are
damaged, as when terrorists attack computer centers with explosives or gasoline,
or when a "computer virus"--a program capable of altering or erasing computer
memory--is introduced into a computer system. As subjects of crime, computers
represent the electronic environment in which frauds are programmed and
executed; an example is the transfer of money balances in accounts to
perpetrators' accounts for withdrawal. Computers are instruments of crime when
used to plan or control such criminal acts as complex embezzlements that might
occur over long periods of time, or when a computer operator uses a computer to
steal valuable information from an employer.

Computers have been used for most kinds of crime, including fraud, theft,
larceny, embezzlement, burglary, sabotage, espionage, murder, and forgery, since
the first cases were reported in 1958. One study of 1,500 computer crimes
established that most of them were committed by trusted computer users within
businesses; persons with the requisite skills, knowledge, access, and resources.
Much of known computer crime has consisted of entering false data into computers,
which is simpler and safer than the complex process of writing a program to
change data already in the computer. With the advent of personal computers to
manipulate information and access computers by telephone, increasing numbers of
crimes--mostly simple but costly electronic trespassing, copyrighted-information
piracy, and vandalism--have been perpetrated by computer hobbyists, known as
"hackers," who display a high level of technical expertise. For many years, the
term hacker defined someone who was a wizard with computers and programing. It
was an honor to be considered a hacker. But when a few hackers began to use
their skills to break into private computer systems and steal money, or
interfere with the system's operations, the word acquired its current negative
meaning. Organized professional criminals have been attacking and using computer
systems as they find their old activities and environments being automated.

There are not a large number of valid statistics about the extent and
results of computer crime. Victims often resist reporting suspected cases,
because they can lose more from embarrassment, lost reputation, litigation, and
other consequential losses than from the acts themselves. Limited evidence
indicates that the number of cases is rising each year, because of the
increasing number of computers in business applications where crime has
traditionally occurred. The largest recorded crimes involving insurance,
banking, product inventories, and securities have resulted in losses of tens of
millions to billions of dollars--all facilitated by computers. Conservative
estimates have quoted $3 billion to $100 billion as yearly losses due to
computer hackers. These losses are increasing on a basis equivalent to the
number of computers logged on to networks, which is almost an exponential growth
rate. The seriousness of cybercrimes also increases as the dependancy on
computers becomes greater and greater.

Crimes in cyberspace are becoming more and more popular for several
reason. The first being that computers are become more and more accessible;
thus are just become another tool in the arsenal of tool to criminals. The
other reason that computer crimes are becoming more and more common are that
they are sometimes very profitable. The average computer crime nets a total of
$650,000 (American, 1991 standards); more than seventy-two times that of the
average bank robbery.

Today's Techno bandits generally fall one of three groups, listed in the
order of the threat they pose:

1. Current or former computer operations employees.
2. Career criminals who use computers to ply their trade.
3. The hacker.

Outsiders who break into computer systems are sometimes more of a threat,
but employees and ex-employees are usually in a better position to steal.
Because we rely more and more on computers, we also depend on those who make
them and run them. The U.S. Bureau of Labor Statistics projects that the
fastest growing employment opportunities are in the field computers and data-
processing. Since money is a common motive for those who use their computing
know-how to break the law, losses from computer theft are expected to grow as
the number of computer employees rises.

The following are examples of how employees that work on computers can
gain profit at the employers expense:

In 1980, two enterprising ticket agents for TransWorld Airlines (TWA)
discovered how to make their employer's computer work for them. The scam went
like this: When a passenger used cash to pay for a one-way ticket, Vince
Giovengo sent in the credit change form, which should have been discarded. He
kept the receipt the should have been given to the costumer for paying cash.
Samuel Paladina, who helped board passengers, kept the part of the traveler's
ticket that should have been returned to the costumer. The two agents used
computers to reassemble the ticket from the pieces they had. They then marked
the ticket void, and kept the cash the traveler had paid. The swindle was
finally discovered by another employee who questioned the large number of voided
tickets, only after approximately $93,000 was taken.

The two TWA employees were tried in the United States and were convicted
of federal wire fraud in the United States. They each received six months in
prison as a result of their crime. The penalty they had to pay should have been
much, much higher, in order to prevent computers from being used in crimes in
the future. This is true for not just the United States and Canada, but for
every country in the world.

Another computer heist, one of the largest ever, involved several highly
placed employees of the Volkswagen car company of West Germany. In 1987 the
company discovered that these "loyal" workers had managed to steal $260 million
by re- programming the computers to disguise the company's foreign currency
transactions. The workers that committed the crime received 10 years in
Germany's prison system; not nearly as harsh as if they had stolen the money
through non- computerized means. This sets an example that computer crimes are
easy to execute, and are punished very lightly. This will evoke a downward
spiral; leading to more and more computer crimes.

For career criminals, computers represent a new medium for their illegal
actions. Computers only enhance the speed and quality of the crimes. Now the
professional criminals can steal or commit almost any other crime they want,
simply by the means of typing directions into the computer. Computers are
quickly being added to the list of the tools of crime.

Hackers often act in groups. The actions of several groups of hackers,
most notable are the Masters of Deception (MOD) and the Legion of Doom, have
been exposed in the media recently. These groups and most malicious hackers are
involved in computer crime for the profit available to them.

Individual hackers are often male teenagers. They comprise the majority
of the computer criminals, although they do pose a major threat to society's
computer uses.

Computer criminals have various reasons for doing what they do. The
main reason computer crimes are being committed on the large scale that they are
is mainly for the profit. As earlier stated, the average computer crime nets
more than seventy-two times that of the average bank robbery. This is seen for
many skilled computer operators as a opportunity to make some quick profit.
Cybercrimes are usually only committed by people that would not commit any other
type of crime. This shows that the chances of getting caught and punished are
perceived as very low, a view that must be changed.

Some hackers feel that it is their social responsibly to keep the
cyberspace a free domain, with out authorities. This is accomplished by sharing
information, and removing the concept of property in cyberspace. Therefore,
they feel that it is proper to take information and share it. In their minds,
they have committed no crime, but from the victim's eyes, they deserve to be
punished.

Other hackers think that it is a challenge to read other's files and see
how far they can penetrate into a system. It is pure enjoyment for these
hackers to explore a new computer network. It becomes a challenge to gain
access to strange, new networks. They often argue that they are only curious
and cause no harm by merely exploring, but that is not always the case.

Where did my homework files go? Who is making charges to my credit
card? Sounds like someone is out for revenge. Computer have become a modern
day tool for seeking revenge. Here is an example: A computer system operator
was fired from CompuServe (a major Internet provider) and by the next day his
former manager's credit card numbers had been distributed to thousands of people
via electronic bulletin boards. The manager's telephone account had been
charged with thousands of long-distance phone calls, and his driver's license
had been issued with hundreds of unpaid tickets. This shows the awesome power
of a knowledgeable hacker.

Also, these hackers try to maintain free services. Some of these free
services include Internet access, and long distance telephone access.

Banks and brokerage houses are major targets when stealing money is the
objective, because of their increased reliance on electronic funds transfer
(EFT). Using EFT, financial institutions and federal and provincial governments
pass billions of dollars of funds and assets back and forth over the phone lines
every day. The money transferred from bank to bank or account to account, is
used by sending telephone messages between computers. In the old days, B.
[efore] C. [omputers], transferring money usually involved armored cars and
security guards. Today, the computer operators simply type in the appropriate
instructions and funds are zipped across telephone lines from bank A to bank B.
These codes can be intercepted by hackers and used to gain credit card numbers,
ATM and personal identification numbers, as well as the actual money being
transferred. With the ATM and credit card numbers, they have access to all the
money in the corresponding accounts.

The act of changing data going into a computer or during the output from
the computer is called "data diddling". One New Jersey bank suffered a $128,000
loss when the manager of computer operations made some changes in the account
balances. He transferred the money to accounts of three of his friends.

"Salami slicing" is a form of data diddling that occurs when an employee
steals small amounts of money from a large number of sources though the
electronic changing of data (like slicing thin pieces from a roll of salami).
For example, in a bank, the interest paid into accounts may routinely be rounded
to the nearest cent. A dishonest computer programer may change the program so
that all the fractions of the cents left over go into his account. This type of
theft is hard to detect because the books balance. The sum of money can be
extremely large, when taken from thousands of accounts over a period of time.

"Phone Phreaks" were the first hackers. They are criminals that break
into the telephone system though many various mean to gain free access to the
telephone network. Since telephone companies use large and powerful computers
to route their calls, they are an oblivious target to hackers.

Stealing information in the form of software (computer programs) is also
illegal. Making copies of commercial software, for re-sale or to give to others
is a crime. These types of crime represent the largest growing area of computer
crime. In one case, a group of teenagers pretending to be a software firm, sold
$350,000 dollars worth of stolen software to a Swiss electronics company.

While most hackers claim curiosity and a desire for profit as motives
for cracking computer systems, a few "dark-side hackers" seem to intentionally
harm others. For these individuals, computers are convenient tools of
wickedness. One crazed hacker broke into the North American Air Defense
computer system and the U.S. Armies MASNET computer network. While browsing the
files, officials say, he had the ability to launch missiles at the USSR. This
could have led the a nuclear war, and possibly the destruction of the world.

There are more than 1200 bugs out there, and the infections spread put
the victim out of action until the healing process begins (if there is a healing
process). This may sound like a description of the common cold or flu virus,
except that the virus does not attack people. This bug is made by human hands
and it attacks computers. It is spread though shared software, almost as easily
as a sneeze, and it can be every bit as weakening as the flu. Around the world
on March 6, 1992, computer users reported for work only to find that their
computers didn't work. The machines had "crashed" due to Michelangelo. This
was a computer virus that was set to destroy all infected computers because it
was set to go off on the renaissance artist's 517th birthday. Approximately
10,000 computers were hit world wide. The virus disabled the computers causing
millions of dollars worth of down-time and lost data.

Computer crimes are becoming more and more dangerous. New laws and
methods of enforcement need to be created; the evidence is above. An effort is
being made by governments, but it is not enough. The problem is a international
affair, and should be treated as such.

Current Canadian laws are some of the most lenient in industrialized
counties. They were also in place much later than other countries put their
laws about computer crime into effect, when compared to the United States and
Japan. The Criminal Law Amendment Act, 1985 included a number of specific
computer crime- related offences. Now, for the first time, Canadian law
enforcement agencies can lay charges relating to cybercrime. The following text
is an excerpt from the Martin's Annual Canadian Criminal Code, 1995 edition:

326. (1) Every one commits theft who fraudulently, maliciously, or without
colour of right,
(b) uses any telecommunication facility or obtains any telecommunication
service.
(2)In this section and section 327, "telecommunication" means any
transmission, emission or reception of signs, signals, writing, images or sounds
or intelligence of any nature by wire, radio, visual, or any other electro-
magnetic system. 342. 1 (1) Every one who, fraudulently and without colour of
right,
(a) obtains, directly or indirectly, any computer service,
(b) by means if an electro-magnetic, acoustic, mechanical or other
device, intercepts or causes to be intercepted, directly or indirectly, any
function of a computer system, or
(c) Uses or causes to be used, directly of indirectly, a computer system
with intent to commit and offence under paragraph (a) or (b) or an offence under
section 430 in relation to data or a computer system is guilty of an indictable
offence and liable to imprisonment for a term not exceeding ten years, or is
guilty to an offence punishable on summary conviction. 430. (1.1) Every one
commits mischief who willfully
(a) destroys or alters data;
(b) renders data meaningless, useless or ineffective;
(c) obstructs, interrupts or interferes with any person in the lawful
use of data; or
(d) obstructs, interrupts of interferes with the lawful use of data or
denies access to data to any person who is entitled to access
thereto.

These Canadian are already outdated, and they are only eleven years old.
They need to be amended to include stiffer penalties. At the time of the
creation of the laws in 1985, they were deemed adequate, because computers
crimes were not looked upon as a serious issue with far-reaching effects. In
1996, computer crime has become a damaging and dangerous part of life. It is
now necessary to revamp these laws to include young offenders.

The young people committing some of these crimes have very detailed
knowledge of computer systems and computer programing. If they can handle this
type of knowledge, and commit these crimes, they should be able to foresee the
consequences of their actions. Most young hackers feel that they are bright,
and therefore should be able understand the results of their actions on other's
computers and computer systems. The laws should treat these young offenders
like adults, because they realize what they are doing is wrong, and should
suffer the consequences.

Some of the computer crimes listed in the criminal code are only
summary offences; thus are not considered very serious. This spreads the
message to hackers that the crimes are not serious, but they are. Since the
hackers don't view the crimes as serious, they are likely to commit more of them.
If the consequences of breaking any laws referring to computer crime were made
tougher, hackers would realize what they are doing is wrong. They will also see
other hackers being charged with offences under the criminal code ans figure out
that they may be next on the list to be punished for their actions.

Not only do these laws need to be made tougher, they need to be enforced
consistently. The Authorities must from all countries must have a conference to
discuss the need for consistent enforcement of the law referring to computer
crime. This is because computer crimes are truly international. A hacker in
Canada may break into a bank in Switzerland. Does the criminal get punished by
the laws of the U.S. or by the laws of Switzerland? This needs to be decided
upon.

The authorities must have special operations to stop computer crimes,
just as they do for drug trafficking. Much time must be devoted to stopping
these crimes, before it leads to disaster. The problem is getting out of hand
and the public must actively participate in cooperation with the authorities in
order to bring the problem under control.

Security is one matter that we can take into our own hands. Until new
laws are created and enforced, it is up to the general computer-using public to
protect themselves. The use of passwords, secure access multiports and common
sense can prevent computer crimes making victims of us all.

Passwords can add a remarkable amount of security to a computer system.
The cases where pass words have been cracked are rare. Included with the
password program must be a access restriction accessory. This limits the number
of guesses at a password to only a few tries, thus effectively eliminating 98%
of intruders.

Secure access multiports (SAM's) are the best protection against
computer crime making a victim out of a computer user. When joining a network,
the user calls in and enters password and access code. The user is then
disconnected from the network. If the network recognizes the user as a valid
one, it will call the user back and allow he/she to log on. If the user was
invalid, the network will not attempt to re-connect with the user (see figure 1).
This prevents unwanted persons from logging on to a network.

Common sense is often the best defense against computer crime. Simple
things like checking and disinfecting for viruses on a regular basis, not
sharing your password or giving out your credit card number on online services
(ie: Internet). Also, employers can restrict access employees have to computers
at the place of employment. This would dissipate most computer crimes executed
by employees.

If new laws and enforcement of those law are not soon established, along
with heightened security measures, the world will have a major catastrophe as a
result of computer activity. The world is becoming increasingly dependant on
computers, and the crimes committed will have greater and greater impact as the
dependancy rises. The possible end of the world was narrowly averted, but was
caused by a computer crime. The United States defense computer system was
broken into, and the opportunity existed for the hacker to declare
intercontinental nuclear war; thus leading to death of the human race. Another
event like this is likely to occur if laws, enforcement of the laws and security
of computers are not beefed up. The greatest creation of all time, the computer,
should not lead the destruction of the race that created it.