tegory in turn, management effectively protects its information through policy, education and training, and technology controls.
Question 32. What Are Different Acts Of Human Error Or Failure?
Includes acts done without malicious intent. It is Caused by:
- Improper training
- Incorrect assumptions
- Other circumstances.
Question 33. How Human Error Can Be Prevented?
Much human error or failure can be prevented with training and ongoing awareness activities,but also with controls,ranging from simple procedures like asking users to type a critical command twice,to more complex procedures ,such as the verification of the commands by a second party(Eg key recovery actions in PKI systems).
Question 34. What Is Intellectual Property?
Intellectual property is “the ownership of ideas and control over the tangible or virtual representation of those ideas” . Many organizations are in business to create intellectual property.
- trade secrets
Question 35. How Intellectual Property Can Be Protected?
Enforcement of copyright has been attempted with technical security mechanisms,such as using digital watermarks and embedded code.The most common reminder of the individual’s obligation to fair and responsible use is the license agreement window that usually pops up during the installation of a new software.
Question 36. What Is Deliberate Acts Of Espionage Or Trespass?
- Broad category of activities that breach confidentiality
- Unauthorized accessing of information
- Competitive intelligence vs. espionage
- Shoulder surfing can occur any place a person is accessing confidential information
- Controls implemented to mark the boundaries of an organization’s virtual territory giving notice to trespassers that they are encroaching on the organization’s cyberspace
- Hackers uses skill, guile, or fraud to steal the property of someone else.
Question 37. Who Are Hackers? What Are The Two Hacker Levels?
The classic perpetrator of deliberate acts of espionage or trespass is the hacker. Hackers are “people who use and create computer software [to] gain access to information illegally”. Generally two skill levels among hackers: Expert hacker unskilled hacker(Script kiddies).
Question 38. What Is Information Extortion?
Information extortion is an attacker or formerly trusted insider stealing information from a computer system and demanding compensation for its return or non-use.
Extortion found in credit card number theft(A Russian hacker named Maxus,who hacked the online vendor and stole several hundred thousand credit card numbers).
Question 39. What Is Deliberate Acts Of Sabotage And Vandalism?
Individual or group who want to deliberately sabotage the operations of a computer system or business, or perform acts of vandalism to either destroy an asset or damage the image of the organization
These threats can range from petty vandalism to organized sabotage
Organizations rely on image so Web defacing can lead to dropping consumer confidence and sales
Rising threat of hacktivist or cyber-activist operations – the most extreme version is cyber-terrorism.
Question 40. What Is Cyber Terrorism?
Cyberterrorism is amost sinister form of hacking involving cyberterrorists hacking systems to conduct terrorist activities through network or internet pathways.
An example was defacement of NATO web pages during the war in Kosovo.
Question 41. What Are The Deliberate Acts Of Theft?
Illegal taking of another’s property – physical, electronic, or intellectual
The value of information suffers when it is copied and taken away without the owner’s knowledge
Physical theft can be controlled – a wide variety of measures used from locked doors to guards or alarm systems
Electronic theft is a more complex problem to manage and control – organizations may not even know it has occurred.
Question 42. What Are Deliberate Software Attacks?
When an individual or group designs software to attack systems, they create malicious code/software called malware
Designed to damage, destroy, or deny service to the target systems
back door or trap door
Question 43. What Are The Forces Of 