Cybercrime Overview and Classification

Cybercrime Definition

• Cybercrime is any crime that involves a computer or mobile device and a network.
• Cybercrime can be committed using a computer or targeting a computer.
• Cybercrime can be defined as "Offences that are committed against individuals or groups with a criminal motive to intentionally harm the reputation of the victim or cause physical or mental harm to the victim directly or indirectly, using modern telecommunication networks such as the Internet (Chat rooms, emails, notice boards and groups) and mobile phones (SMS/MMS)."

Classification of Cyber Crimes

• Cyber crimes can be categorized by how the computer is involved: either as a tool to commit the crime or as a target.

Computer Intrusions and Hacking

• Hacking is the illegal access to a computer system or network.
• Hacking can be used to commit various cyber crimes, including theft and terrorism.

Computer Security

• Computer security is the protection of computing systems and the data they store or access.
• Computer Security covers processes and mechanisms that protect computer-based equipment, information, and services from unauthorized access, change, or destruction.
• Computer security includes protection from unintended or unauthorized events and natural disasters.

Importance of Computer Security

• Computer security is essential for enabling job tasks, education, and research.
• Computer security supports critical business processes.
• Computer security protects personal and sensitive information.

90-10 Rule of Security

• The 90/10 Rule states that 10% of security safeguards are technical and 90% rely on user behavior.
• Example: A door lock provides technical security, but user habits like locking it, checking if it's closed, and keeping the keys secure are crucial for effective security.
• Everyone using a computer needs to understand and practice good security habits.

Consequence of Security Violations

• Security violations can lead to compromised personal or confidential information.
• Potential risks include identity theft, data corruption or destruction, and unavailability of critical information in emergencies.

Simple Security Measures

• Use strong and unique passwords that are difficult to guess.
• Keep passwords secret.
• Update operating systems and applications with necessary security patches.
• Use up-to-date antivirus and anti-spyware software.
• Avoid clicking on unknown or unsolicited links or attachments.
• Do not download unknown files or programs.
• Use HTTPS connections and look for the padlock symbol in the URL bar when entering sensitive information or passwords.

Biggest Cyber Attacks of 2017

• Equifax Data Breach – 145.5 Million Accounts
• Uber Data Breach – 57 Million Records
• WannaCry Cyber Attack – 300,000 Systems
• Yahoo! Makes History, Again – 3 Billion Accounts
• Deep Root Analytics Data Breach – 198 Million U.S. Voters
• Rasputin Attacks – 60 Universities and Federal Agencies

Dark Web vs Deep Web vs Surface Web

• Surface Web: Indexed by search engines, minimal illegal activity.
• Deep Web: Not indexed by search engines, little illegal activity outside of the Dark Web, large and growing.
• Dark Web: Restricted to special browsers, not indexed by search engines, significant illegal activity, accessed with passwords, encryption, or gateway software.

Cost of Information on the Dark Web

• Bank credential: $1,000 plus (6% of the total account balance)
• U.S. credit card with track data: $12
• EU, Asia credit card with track data: $28
• Hacking into a website: $100 to $300
• Counterfeit social security cards: $250 to $400
• Counterfeit driver's license: $100 to $150

Examples of Cyber Crimes where Computers are Tools

• Threatening emails
• Identity theft
• Defamation
• SPAM and Phishing

Examples of Cyber Crimes where Computers are Targets

• Viruses
• Worms
• Industrial espionage
• Software piracy
• Hacking

Specific Examples of Cybercrimes

• Theft of Information: Includes stealing data from computer hard disks or removable storage media, potentially leading to identify theft.
• Email Bombing: Involves sending massive amounts of email to a victim, causing the email account or server to crash.
• Salami Attacks: Financial crime where a small amount of money is deducted over time from multiple accounts, going unnoticed by the account holder.
• Denial of Service (DoS) Attack: Overloads a computer resource with requests, causing it to crash and deny service to authorized users.
• Virus: A program that attaches to a computer or file and replicates, often affecting data by altering or deleting it.
• Logic Bombs: Programs that activate only when a specific event occurs, such as a specific date.
• Trojan Attacks: Unauthorized programs disguised as authorized software, concealing their true purpose.
• Worm: Self-replicating programs that spread without needing a host file (unlike viruses), consuming memory and causing system problems.
• Web Jacking: The forceful taking control of a website by cracking passwords.
• Cyber-Terrorism: Hacking designed to instill terror, using similar tactics to conventional terrorism.