CSE 312 Midterm 2 Study Guide.

Exam Review > CSE 312 Midterm 2 Study Guide.

Stony Brook University CSE 312 ● Chapter 5 Crime and Security ○ Hacking: Intentional, unauthorized access to computer systems ○ 3 Phases ■ Phase 1: The Joy of Programming- 1960s-1970s (hacking was a positive term) ● Hacker: creative programmer who wrote elegant or clever code (hack) ● Jude Milhon: hacking was “clever circumvention of imposed limits” ■ ...[Show More]

Stony Brook University
CSE 312
● Chapter 5 Crime and Security ○ Hacking: Intentional, unauthorized access to computer systems ○ 3 Phases ■ Phase 1: The Joy of Programming- 1960s-1970s (hacking was a positive term) ● Hacker: creative programmer who wrote elegant or clever code (hack) ● Jude Milhon: hacking was “clever circumvention of imposed limits” ■ Phase 2: 1790s-1990s (hacking began to take on more negative meanings) ● Hacking: referred to breaking into computers for which the hacker doesn’t have authorized access; applied primarily to individuals ○ Spreading computer worms and viruses, “phone phreaking” (manipulating telephone systems) ● Companies used hackers to analyze and improve security ■ Phase 3: began mid 1990s (growth of Web, e-commerce and participation of large portion of the general public online) ● Web growth (increased use of the Internet for email, communication, sensitive information, economic transactions, etc) changed hacking (made it more dangerous) ○ Large scale theft of personal and financial information ● Viruses and worms were able to be spread more rapidly ● Political hacking (hacktivism): use of hacking to promote a political cause. ○ Denial-of-service (DoS) attacks were used to shut down websites ○ Difficult to assess the ethical soundness because there is often significant disagreement about whether it is a form of civil disobedience and how (or whether) it should be punished ○ Can be used by hackers to hide other criminal activities ○ Two types of hackers (cowboys of the internet and computer frontier; white hat=good, black hat=bad) ■ “Black hat hacker:” used their skills to find system vulnerabilities and exploit them for personal financial gain or other malicious reasons ■ “White hat hacker:” used their skills to demonstrate system vulnerabilities and improve security ■ “Gray hats” used methods of questionable legality or publishes vulnerabilities

[Show Less]