CRM303 Week 3 - Computer Hacking

M U Computer Hacking



Instructor: Dr. Michael WilsonContact: michael.wilson@murdoch.edu.auAffiliation: MU Murdoch University

1. What is Computer Hacking?

Definition


  • Hack Definition:The modification or alteration of hardware or software, driven by both creativity and technical knowledge. Hacking can involve employing technology in new and innovative ways, which can be applied for either legitimate purposes (like improving software) or illegitimate ones (such as exploiting vulnerabilities).


  • Not Necessarily Illegal:Hacking does not always conform to negative stereotypes; similar to engineering, it demands creativity and craftiness, making it a nuanced field.

  • Unauthorized Access:

    • Legal Definition: Refers to inclusive acts of unauthorized access, modification, or impairment of data in a computer system, which is characterized by a breach of legal permissions.

    • Quote: "The unauthorized access and subsequent use of other people’s computer systems" (Taylor, 1999), emphasizing the violation of privacy and ownership.

2. The Hacker Ethic and Subcultures

Hacker Perceptions


  • Negative:Hackers are often viewed with suspicion and fear, commonly associated with cybercrime and illegal activities, intertwined with cyberpunk aesthetics and narratives.


  • Positive:On the other hand, hackers can be viewed as brilliant individuals challenging excessive government control and corporate monopolies, standing up for freedom of information and privacy.

Hacker Typologies

  • Types of Hackers:

    • Black Hats: Hackers who exploit vulnerabilities with malicious intent for personal financial gain, often engaged in criminal activities.

    • White Hats: Ethical hackers who actively work to improve system security, often hired by organizations to find and rectify vulnerabilities.

    • Gray Hats: Operate in a morally ambiguous area, sometimes violating laws or ethical standards without malicious intent, often aiming for financial compensation.

    • Script Kiddies: Novices who use pre-existing hacking tools and scripts without true understanding, often causing disruptions without advanced skills.

3. Access, Modification, and Impairment Offences

Legislation Overview

  • Unauthorised Access & Modification:

    • Criminal penalties vary considerably based on the hacker’s intent (malicious vs benign) and the harm caused to victims or data systems.

    • Example Cases:

      • Soyke v R (2016): Resulted in imprisonment for unauthorized access through malware, highlighting the judiciary's stance on digital crimes.

      • DPP (Cth) v Rogers (1998): Illustrates the legal repercussions of employing fraud through unauthorized data modification, emphasizing that legality is often dependent on intent and context.

4. Categories of Cybercrime

Key Types

  • Cyber-Trespass: Involves unauthorized access or invasion of digital spaces without permission, similar to physical trespassing.

  • Cyber-Deceptions and Theft: Encompasses a wide variety of fraudulent activities including credit card fraud, identity theft, and digital piracy, representing a significant portion of cybercrime.

  • Cyber-Violence: Reflects harmful impacts manifested through digital means, including cyberbullying, hate speech, and threats, which can have severe implications for victim well-being.

Impact and Statistics


  • Prevalence of Cybercrime:Cybercrime continues to pose a profound impact in Australia, with significant victimization rates reported (Voce & Morgan, 2023), demonstrating the urgent need for enhanced cybersecurity measures and public awareness campaigns.

5. Common Techniques of Hacking

Hacking Methods

  • Shoulder Surfing: The act of observing the screen contents of another person without their consent, often seen in public spaces where sensitive information can be exposed.

  • Social Engineering: A technique that exploits human psychology, manipulating individuals into revealing confidential information, often using trust as a weapon.

  • Packet Sniffing: The process of intercepting data packets as they travel over a network, allowing hackers to collect sensitive information like login credentials.

  • Man-in-the-Middle Attacks: A malicious act where the hacker intercepts and potentially alters the communication between two parties without their awareness.

  • Cryptanalysis: The study and practice of breaking encryption algorithms to decode encrypted information without authorization.

  • Payload Attacks: Involves embedding malicious software into systems, which can include various types like ransomware, Trojans, and viruses designed to harm systems or steal data.

6. The Importance of Encryption

Key Concepts

  • Cryptography Definition: The science of securing communications through various techniques against unauthorized access.

  • Encryption Process: Involves taking plaintext (original, readable information) and converting it into ciphertext (encoded, secret communication) using algorithms known as ciphers, essential for protecting sensitive data.

7. Malware - Key Concepts

Overview

  • Malware Definition: Any software designed to harm, exploit, or disenable systems or data, including various subgenres that have different methodologies of attack.

  • Common Types:

    • Virus: Malicious code that attaches itself to clean code and self-replicates, requiring user activation to spread.

    • Worm: A standalone malware that replicates itself to spread to other computers, functioning independently without user involvement.

    • Trojan Horse: Disguises itself as legitimate software, tricking users into installing it while facilitating malicious activities.

8. Zero Day Exploits and Cybersecurity

Key Issues

  • Zero Day Exploit: A software vulnerability that is not publicly known, posing significant risks before a patch or fix can be developed.

  • Market for Exploits: The emergence of an underground market on the dark web that traffics undisclosed vulnerabilities highlights the increasing sophistication of cybercrime.

  • Cybersecurity Definition: Refers to measures and technologies used to protect digital systems from cyber threats, emphasizing the extreme importance of ongoing education and awareness to combat evolving threats.


Neutralization theory is a sociological concept developed in the 1950s by Gresham Sykes and David Matza. It explains how individuals engage in deviant behavior while still believing themselves to be law-abiding citizens. The theory posits that people learn to neutralize the moral objections to their deviant acts through a series of techniques which allow them to rationalize their actions. These techniques include denial of responsibility, denial of injury, denial of the victim, condemnation of the condemners, and appeal to higher loyalties. Essentially, individuals can justify their actions to their own conscience, enabling them to proceed with behavior that is typically viewed as unacceptable.