Ist 452 Quiz 3

Front 1

What do Cyberattacks do?

Back 1

(1) disrupt equipment and hardware reliability,
(2) change processing logic, or
(3) steal or corrupt data

Front 2

What are the types of cyber-terrorist attacks?

Back 2

Direct: Cascading disruption or arrest of the functions through direct attacks on a critical node, system, or function

Indirect: Cascading disruption and financial consequences for government, society, and economy through reactions to an attack

Exploitation: Exploitation of elements of a particular infrastructure to disrupt or destroy another target

Front 3

Computer Fraud & Abuse Act: CFAA - What computers does it protect?

Back 3

Protects almost all computers

Front 4

What was the first copyright?

Back 4

British Statute of Anne (1710)

Front 5

When do you get copyright protection?

Back 5

original works of authorship fixed in any tangible medium of expression, now known or later developed, from which they can be perceived, reproduced, or otherwise communicated....

Front 6

What is the difference between a license and an assignment in regards to copyrights?

Back 6

assignment = sale, license = rental

Front 7

What is the First Sale Doctrine?

Back 7

First sale doctrine establishes right of owner to control initial distribution, Thereafter, first sale buyers free to distribute a particular copy (not free to make additional copies)

Front 8

A&M Records, Inc. v. Napster (2001)

Back 8

Decision

P2P file sharing of compressed music files using a central server and database is not fair use

Front 9

Lenz v. Universal Music Corp. (2007), youtube mom

Back 9

copyright holders can't order one of their songs removed from the Web without first checking to see if the excerpt was so small and innocuous that it was legal

Front 10

Lanham (Trademark) Act 1946

Back 10

Protects identification symbols and features in order to distinguish the source of a good or service

Front 11

How does a trademark get more protection?

Back 11

Generally, the more a trademark is distinctive, the more protection it gets

Front 12

Do generic marks get protection?

Back 12

The law generally does not protect marks that are considered to be “generic”, ex. “television,” “computer,” or “refrigerator”

Front 13

What are "Trade Secrets?"

Back 13

Any formula, pattern, physical device, idea, process, or other information that:
(1) has commercial value or provides a competitive advantage
(2) is treated in a way that can reasonably be expected to prevent the public or competitors from learning about it, absent improper acquisition or theft

Front 14

What can trade secrets be used for?

Back 14

used in cases where a patent or copyright will not be sought, but where the owner wants to keep data/process/idea a secret from the world

Front 15

Who is not involved in National Infrastructure Protection Plan and why?

Back 15

CIA, NSA not involved so they don’t have to share

Front 16

Where do patents first appear in the constitution?

Back 16

Article I, section 8:

“Congress shall have power . . . to promote the progress of science and useful arts, by securing for limited times to authors and inventors the exclusive right to their respective writings and discoveries”

Front 17

What is Infringement of a patent?

Back 17

the unauthorized making, using, offering for sale, or selling any patented invention or importing any patented invention during the term of the patent

Front 18

What are the types of critical infrastructure?

Back 18

o National Monuments and icons
o Nuclear Power Plants
o Dams
o Government Facilities
o Commercial key assets

Front 19

Why can hiring private contractors be a security risk?

Back 19

o Many contractors have single manufacturing and distribution points – many are vulnerable to attack

Front 20

World War 2.0: Estonia

Back 20

2007

Cyber attack disabled websites of government, political parties, newspapers, banks, and companies

Cyber-assault by "distributed denial-of-service attack."

Front 21

World War 2.0: Georgia

Back 21

2008

Cyber-assault by "distributed denial-of-service attack."

The Georgian government blamed Russia -- Russian government denied responsibility

Front 22

What are the types of cyber-terrorist attacks?

Back 22

Direct: Cascading disruption or arrest of the functions through direct attacks on a critical node, system, or function

Indirect: Cascading disruption and financial consequences for government, society, and economy through reactions to an attack

Exploitation: Exploitation of elements of a particular infrastructure to disrupt or destroy another target

Front 23

What is phishing?

Back 23

o Fraudulent attempt, usually made through electronic means, to steal personal info for purpose of exploitation

Front 24

What was the Slammer Worm?

Back 24

Example of possible vulnerability of control systems when SCADA controls are interconnected with office networks

 August 2003, the “Slammer” corrupted for five hours the computer control systems at the Davis-Besse nuclear power plant located in Ohio

The computer worm penetrated systems in the control room largely because the business network for its corporate offices was found to have multiple connections to the Internet that bypassed the control room firewall

Front 25

What are the laws used to combat cyber-crime?

Back 25

o Computer Fraud & Abuse Act: CFAA
 Provides for criminal and civil penalties for unauthorized access to computers
 Focus on computer-related fraud & related activity
o USA-PATRIOT Act
 Section 814 amended the Computer Fraud and Abuse Act in a number of ways
o The Cybersecurity Act of 2009
 Would significantly increase federal authority over critical infrastructure and cyberspace generally

Front 26

What's the difference between cyber-crime and cyber-espionage?

Back 26

o Cyber-espionage is unauthorized probing to test a target computer’s configuration or evaluate its system defenses, or the unauthorized viewing and copying of data files
 Over 100 different foreign intelligence organizations regularly attempt to hack into the computer systems of U.S. government agencies and U.S. companies.
o Cybercrime is crime that is enabled by, or that targets computers:
 Can involve theft of intellectual property, a violation of patent, trade secret, or copyright laws
 May also includes attacks against computers to deliberately disrupt processing
 Cyber attack may be crime or terrorism -- distinction in the intent of the attacker; possible to be both.

Front 27

What did the Canadian researchers discover?

Back 27

o March 28, 2009: According to Canadian researchers, a cyber spy network based mainly in China tapped into classified documents from government and private organizations in 103 countries and Tibetan exiles.

Front 28

Why does cyber-terrorism appeal to terrorists?

Back 28

o Target rich environment
 Vast number of computers/networks
o Anonymity
 Can conceal online identity; no physical barriers or borders
o Cheaper than traditional terrorist methods
 Only need computer and online connection
o Less risk
 Conducted remotely
o Broader range of impact
 Cyber attack could affect large numbers; generate headlines

Front 29

How does the PATRIOT act deal with cyber-terrorism?

Back 29

o Section 814 amended the Computer Fraud and Abuse Act in a number of ways
 increased penalties for hackers who damage protected computers (from a maximum of 10 years to a maximum of 20 years)
 clarified the intent required to make explicit that a hacker need only intend damage, not a particular type of damage
 added a new offense for damaging computers used for national security or criminal justice
 expanded the coverage of the statute to include computers in foreign countries so long as there is an effect on U.S. interstate or foreign commerce
 allows losses to several computers from a hacker’s course of conduct to be aggregated for purposes of meeting the $5,000 jurisdictional threshold.

Front 30

What's the difference between cyber-crime and cyber-terrorism?

Back 30

o Crime usually doesn’t want to be known, wants money
o Terrorism wants recognition, take down systems

Front 31

What is the hierarchy of Intellectual Property protection?

Back 31

o Patent (most)
o Copyright
o Trademark (least)

Front 32

What is the Uniform Trade Secrets Act?

Back 32

o Info derives independent economic value from secrecy subject to efforts to maintain secrecy

Front 33

What are the penalties for economic espionage?

Back 33

o Penalties
 Economic espionage
• Individuals: 500,000
• Organizations: 10,000,000
 Theft of trade secret
• Individuals: 500,000 or 10 years
• Organizations: 5,000,000
 ******* espionage higher penalties

Front 34

Which IP need to be filed, enforced, etc.?

Back 34

Patents

Front 35

What are the periods of protection for Intellectual Property?

Back 35

o Patent limited to a fixed term 20 years
o Copyright - generally protects for lifetime + 70 years

Front 36

What's the defense if you didn't know something was a trade secret?

Back 36

o Innocent receipt************** got it not knowing it was a trade secret (did not know or should have known)

Front 37

How are ideas treated?

Back 37

o Ideas not copyrightable – only the expression of ideas
 Ideas, procedures, processes, system, methods of operation, concepts, principles, or discoveries

Front 38

What are the requirements for a copyright?

Back 38

o Original works – fixed in any tangible medium of expression ******
 Now known or later developed, from which they can be perceived, reproduced, or otherwise communicated
 Collection and assembly of pre-existing materials or data selected
 Originality and creativity ***********

Front 39

What are the types of patents?

Back 39

o Utility – processes, machine, article of manufacture, or composition of matter
 90% of all patents
 Patents of invention
 Process – transformational
 Machine – mechanism with moving parts that produces predictable results
 Manufacture – articles made that have new form/characteristics
 Composition of matter: combination of two or more substances
o Design patents
o Plant patents – new variety of plants

Front 40

What things cannot be patented?

Back 40

o Naturally occurring things
 Herbalist remedies
o Abstract ideas (time, honor)
o Laws of nature (gravity)
o Mathematical formulae

Front 41

Do we protect lists of facts with copyright?

Back 41

No

Front 42

What is the basic offense called when you interfere with someone’s patent?

Back 42

Infringement

Front 43

What are the requirements for patent-ability?

Back 43

o Patentable subject matter
 Process, machine, manufacture, or composition of matter, or improvement
o Utility
 Requires a defined “real world use”
o Novelty
 Must be new compared to “prior art”
o Nonobviousness
 Can’t be obvious to a person “having ordinary skill in the art”
o Enablement
 Must reveal how to use the patent

Front 44

What is treble damages?

Back 44

Three times the damages

Front 45

What's a legal order?

Back 45

Cease and Desist