Isys 414 Ch. 5

Front 1

Sabotage

Back 1

the intent to destroy or harm a system or some if its components

Front 2

cookie

Back 2

data that Web sties store on your computer to identify their Web sites to your computer and identify you to the Web site so you do not have to log on each time you visit the site

Front 3

white-collar criminals

Back 3

fraud perpetrators

Front 4

misappropriation of assets or employee fraud

Back 4

the theft of company assets

Front 5

fraudulent financial reporting

Back 5

intentional or reckless conduct, whether by act or omission, that results in materially misleading financial statements

Front 6

the fraud triangle

Back 6

based on research, the three conditions that are present when fraud occurs: a pressure, an opportunity, and a rationalization

Front 7

pressure

Back 7

a person's incentive or motivation for committing fraud

Front 8

opportunity

Back 8

the condition or situation that allows a person or organization to commit the fraud, conceal the fraud, and convert the theft to personal gain

Front 9

rationalization

Back 9

allows perpetrators to justify their illegal behavior

Front 10

lapping scheme

Back 10

the perpetrator steals the cash or check that customer A mails into pay its account receivable. Funds received at a later date from customer B are used to pay off customer A's balance. Funds from customer C are used to pay off customer B, and so forth

Front 11

check kiting scheme

Back 11

the perpetrator creates cash by taking advantage of the timing lag between depositing a check and the check clearing the bank

Front 12

computer fraud

Back 12

any illegal act for which knowledge of computer technology is essential for its perpetration, investigation, or prosecution

Front 13

adware

Back 13

using software to collect web-surfing and spending data and forward it to advertising or media organizations. It also causes banner ads to pop up on computer monitors as the Internet is surfed.

Front 14

bluebugging

Back 14

taking control of someone else's phone to make calls, send text messages, listen to their phone calls, or read their text messages

Front 15

bluesnarfing

Back 15

stealing contact lists, images, and other data using Bluetooth

Front 16

chipping

Back 16

planting a chip that record transaction data in a legitimate credit card reader

Front 17

click fraud

Back 17

clicking online ads numerous times to inflate advertising bills

Front 18

cyber-extortion

Back 18

requiring a company to pay a specified amount of money to keep the extortionist from harming the company electronically

Front 19

data diddling

Back 19

changing data before, during, or after they are entered into the system

Front 20

data leakage

Back 20

copying company data, such as computer files, without permission

Front 21

denial-of-service attack

Back 21

sending e-mail bombs (hundreds of messages per second) from randomly generated false addresses. the recipient's Internet service provider e-mail server is overloaded and shuts down

Front 22

dictionary attack

Back 22

using software to guess company addresses and send them blank e-mails. unreturned messages are valid addresses that are added to spammer e-mail lists

Front 23

eavesdropping

Back 23

listening to private voice or data transmission, often using a wiretap

Front 24

economic espionage

Back 24

the theft of information, trade secrets, and intellectual property

Front 25

e-mail threats

Back 25

sending a threatening message asking the recipient to do something that make sit possible to defraud them

Front 26

evil twin

Back 26

a wireless network with the same name as a local wireless access point. the hacker disables the legitimate access point, users unknowingly reconnect to the evil twin, and hackers monitor the traffic looking for useful information

Front 27

hacking

Back 27

accessing and using compuer systems without permission, usually by means of a personal computer and a telecommunications device

Front 28

hijacking

Back 28

gaining control of someone else's computer to carry out illicit activities without the owner's knowledge

Front 29

identity theft

Back 29

assuming someone's identity, usually for economic gain, by illegally obtaining confidential information such as a Social Security number

Front 30

internet misinformation

Back 30

using the internet to spread false or misleading information

Front 31

internet terrorism

Back 31

using the internet to disrupt communication and electronic commerce

Front 32

key logger

Back 32

using spyware to record a user's keystrokes

Front 33

logic and time bombs

Back 33

software the sits idle until a specified circumstance or time triggers it, destroying programs, data, or both

Front 34

malware

Back 34

software that can be used to do harm

Front 35

masquerading/impersonation

Back 35

accessing a system by pretending to be an authorized user. the impersonator enjoys the same privileges as the legitimate user

Front 36

packet sniffing

Back 36

using a computer to find confidential information as it travels the internet and other networks

Front 37

password cracking

Back 37

penetrating system defenses, stealing valid password, and decrypting them so they can be used to access system programs, files, and data

Front 38

pharming

Back 38

redirecting traffic to a spoofed web site to gain access to personal and confidential information

Front 39

phising

Back 39

sending e-mails requesting recipients to visit a web page and verify data or fill in missing data. the e-mails and web sites look like legitimate companies, primarily financial institutions

Front 40

phreaking

Back 40

attacking phone systems and using telephone lines to transmit viruses and to access, steal, and destroy data

Front 41

piggybacking

Back 41

1.the clandestine use of someone's Wi-Fi network
2. tapping into a telecommunications line, latching onto a legitimate user, and accompanying the perpetrator into the system
3. bypassing physical security controls by entering a secure door when an authorized person opens it

Front 42

posing

Back 42

creating a seemingly legitimate business, collecting personal information while making a sale, and never delivering the item sold

Front 43

pretexting

Back 43

acting under false pretenses to gain confidential information

Front 44

rootkit

Back 44

software that conceals processes, files, network connections, and system data from the operating systems and othe rprograms

Front 45

round-down

Back 45

truncating interest calculations at two decimal places. the truncated fraction of a cent is placed in an account controlled by the perpetrator

Front 46

salami technique

Back 46

stealing tiny slices of money over time. an example is increasing expenses by a fraction of a percent and placing those funds in a perpetrator-controlled dummy account

Front 47

scavenging/dumpster diving

Back 47

searching for confidential corporate or personal information by searching trash cans or scanning the contents of computer memory

Front 48

shoulder surfing

Back 48

watching people or listening as they enter or give confidential information

Front 49

skimming

Back 49

double-swiping a credit card or covertly swiping it in a card reader that records the data for later use

Front 50

social engineering

Back 50

techniques that rick a person into disclosing confidential information

Front 51

software piracy

Back 51

illegally copying computer software

Front 52

spamming

Back 52

e-mailing an unsolicited message to many people at the same time

Front 53

splog

Back 53

a spam blog that promotes affiliated web sties to increase their google pagerank

Front 54

spyware

Back 54

using software to monitor computing habits and send that data to someone else, often without the computer user's permission

Front 55

spoofing

Back 55

making an e-mail message look as if someone else sent it

Front 56

steganography

Back 56

hiding data from one file inside a host file such as a large image or sound file

Front 57

superzapping

Back 57

using special software to bypass system controls and perform illegal acts

Front 58

trap door

Back 58

entering a system using a back door that bypasses normal system controls

Front 59

trojan horse

Back 59

unauthorized code in an authorized and properly functioning program

Front 60

typosquatting/URL hijacking

Back 60

setting up web sites with names similar to real web sites so users making typographical errors entering web site names are sent to a site filled with malware

Front 61

virus

Back 61

a segment of executable code that attaches itself to software, replicates itself, and spreads to other systems or files. triggered by a predefined event, it damages sytem resources or displays a message on the monitor

Front 62

vishing

Back 62

voice phishing, where e-mail recipients are asked to call a phone number where they are asked to divulge confidential data

Front 63

war dialing

Back 63

dialing thousands of phone lines searching for idle modems that can be used to enter the system, capture the attached computer, and gain access to the network(s) to which it is attached

Front 64

war driving/rocketing

Back 64

looking for unprotected wireless networks using a car or a rocket

Front 65

worm

Back 65

similar to a virus, but a program rather than a code segment hidden in a host program. copies and actively transmits itself directly to other systems. it usually does not live very long but is quite destructive while alive

Front 66

zero-day attack

Back 66

an attack between the time a new software vulnerability is discovered and a software patch that fixes the problem is released