Exam Cheat Sheet
Cyber Stalking
Stalking: series of actions that would cause a person to fear death or injury
Spam (Bulk email marketing)
Internet version of junk mail
Where do they get email addys?
- legitimate companies
- Newsgroup Extractors
- Websites Extractors
Avoiding Spam
- Use phoney address
- Use anonymous remailer
- Use “AT” in your email address instead of @.
Internet Fraud / Identity Theft
Credit Card Fraud: The unauthorized use of credit cards to obtain money or property
Common ways of obtaining credit card numbers
- Unsecure Website
- Identity Theft Scheme
- Conventional Methods (Swapping hand held terminal)
- SQL Injection: Inserting SQL into input fields of an online form
- Man/Mafia in the middle: Asks for verification with credit card information to make purchases
Avoiding Fraud
- Ensure a site is secure
- Reputable source
- Watch your credit card statements
- Confirm legitimacy of a company
Fraud Types
Spoofing: Pretending to be someone other than the actual source
Phishing: Claiming to be a legitimate business in an attempt to trick people into divulging sensitive information by getting them to go to a specified website
Spear Phishing: Targeting certain individuals
Infallible forecast Scam: Display ability to predict stock twice. 25% of victims are likely to think they are infallible and may likely invest with them.
Computer problem areas
- Use of SIN as a primary key in databases
- Ecommerce
- Vulnerability of Computer Networks
Pharming: Accomplished using DNS
Poisoning: Redirects users to spoofed website
Evidence: proof about a fact that did or did not happen
- Testimony of a witness
- Physical evidence
- Electronic evidence
Artifact - change in evidence that causes investigator to think the evidence relates to the crime
Inculpatory - evidence that supports a given theory
Exculpatory - evidence that contradicts a given theory
Circumstantial - shows circumstances that logically lead to a conclusion of fact
Stalking: series of actions that would cause a person to fear death or injury
Spam (Bulk email marketing)
Internet version of junk mail
Where do they get email addys?
- legitimate companies
- Newsgroup Extractors
- Websites Extractors
Avoiding Spam
- Use phoney address
- Use anonymous remailer
- Use “AT” in your email address instead of @.
Internet Fraud / Identity Theft
Credit Card Fraud: The unauthorized use of credit cards to obtain money or property
Common ways of obtaining credit card numbers
- Unsecure Website
- Identity Theft Scheme
- Conventional Methods (Swapping hand held terminal)
- SQL Injection: Inserting SQL into input fields of an online form
- Man/Mafia in the middle: Asks for verification with credit card information to make purchases
Avoiding Fraud
- Ensure a site is secure
- Reputable source
- Watch your credit card statements
- Confirm legitimacy of a company
Fraud Types
Spoofing: Pretending to be someone other than the actual source
Phishing: Claiming to be a legitimate business in an attempt to trick people into divulging sensitive information by getting them to go to a specified website
Spear Phishing: Targeting certain individuals
Infallible forecast Scam: Display ability to predict stock twice. 25% of victims are likely to think they are infallible and may likely invest with them.
Computer problem areas
- Use of SIN as a primary key in databases
- Ecommerce
- Vulnerability of Computer Networks
Pharming: Accomplished using DNS
Poisoning: Redirects users to spoofed website
Evidence: proof about a fact that did or did not happen
- Testimony of a witness
- Physical evidence
- Electronic evidence
Artifact - change in evidence that causes investigator to think the evidence relates to the crime
Inculpatory - evidence that supports a given theory
Exculpatory - evidence that contradicts a given theory
Circumstantial - shows circumstances that logically lead to a conclusion of fact