6. Computer Fraud and Abuse Techniques

Question 1

Explain how social engineering techniques are used to gain physical or logical access to computer resources

Answer 1

Social engineering refers to techniques or psychological tricks used to get people to comply with the perpetrator’s wishes in order to gain physical or logical access to a building, computer server or network.

Question 2

Explain the factors that perpetrator’s take advantage of are the following

1. Compassion
2. Greed
3. Sex appeal
4. Sloth
5. Trust
6. Urgency
7. Vanity

Answer 2

1. Compassion, they need help
2. Greed, people get something for free
3. Sex appeal, flirtatious or they are simply hot
4. Sloth, fraudster take advantage of lazy people
5. Trust
6. Urgency, it has to be right now
7. Vanity, fraudster tell people they will be popular or successful

Question 3

Why do perpetrators wants acces to gain physical or logical access to a building, computer server or network.

Answer 3

Usually to get the information needed to access a system and obtain confidential data.

Question 4

Mention some types of attacks

Tip: hacking, social engineering and malware

Answer 4

Hacking
Unauthorized access, modification, or use of an electronic device or some element of a computer system.

Social Engineering
Techniques or tricks on people to gain physical or logical access to confidential information.

Malware
Software used to do harm.

Question 5

What types of hacks can be used for embezzlement

Tip: salami, espionage and cyber-extortion

Answer 5

Salami technique: Taking small amounts at a time. Round-down fraud.

Economic espionage: Theft of information, intellectual property and trade secrets.

Cyber-extortion: Threats to a person or business online through e-mail or text messages unless money is paid.