Computer Crime, Attack Methods, and Cyber-Incident Response

Question 1

Define “Trojan horse”.

Answer 1

A malicious program that is hidden inside a seemingly benign file.

Question 2

Define “packet sniffers”.

Answer 2

Programs called packet sniffers capture packets of data as they move across a computer network. Packet sniffing has legitimate uses jot monitor network performance or troubleshoot problems with network communications. However, it is often used by hackers to capture user names an passwords, IP addresses, and other information that can help the hacker break into the network. Packet sniffing a computer network is similar to wire tapping a phone line.

Question 3

Define “worm”.

Answer 3

Similar to viruses except that worms attempt to replicate themselves across multiple computer systems. They generally try to accomplish this by activating the system’s email client and sending multiple emails.

Question 4

What is a back door attack on a system?

Answer 4

A software program that allows an unauthorized user to gain access to the system by side-stepping the normal logon procedures. Back doors were once commonly used by programmers to facilitate access to systems under development.

Question 5

Define session hijacking or masquerading.

Answer 5

This occurs when an attacker identifies an IP address (usually through packet sniffing) and then attempts to use it to access a network. If successful, the hacker has “hijacked” the session, i.e., gained access to the session by pretending to be another user.

Question 6

Define “denial of service attacks”.

Answer 6

An attack that attempts to prevent legitimate users from gaining access to the system. These attacks, called denial of service attacks, are perpetrated by flooding the server with incomplete access request.s

Question 7

What is a logic bomb attack on a system?

Answer 7

An unauthorized program which is planted in the system. The logic bomb lies dormant until the occurrence of a specified event or time (e.g., a specific date, the elimination of an employee from “active employee” status, etc.).

Question 8

Define “malicious software (malware).

Answer 8

Programs that exploit system and user vulnerabilities to gain access to the computer. There are many types of malware.

Question 9

Defines the four types of computer crimes.

Answer 9

1. Computer as target
2. Computer as subject
3. Computer as tool
4. Computer as symbol

Question 10

Define “virus”.

Answer 10

An unauthorized program, usually introduced through an email attachment, which copies itself to files in the users system. These programs may actively damage data, or they may be benign.

Question 11

Define “password crackers”.

Answer 11

Password cracking software generates and tests a large number of potential passwords to try to access a system.