Question

Paul Gray mentioned he was concerned about the security of his clients and their own management of passwords and accounts. Improper password management can lead to cases of fraud and misuse of the system.

One such type fraud is that victims' account passwords can be stolen and their share trading accounts can be misused for making unauthorized transactions that result in the victims making losses. This crime can be executed by the suspect installing key loggers in public computers, such as cyber cafes or airport lounges, or in the victim's own computer. Unsuspecting victims use these infected computers to log in to their online banking and share trading accounts. The passwords and other information pertaining to the victims are e-mailed to the suspect. In such cases, it is often difficult to prosecute the perpetrators, and the existing set of controls is inadequate to fight this type of computer crime.

The perpetrators may also be juveniles. The law understands the immaturity of juveniles and shows leniency toward crimes committed by juveniles. Crimes committed by juveniles can cause the same damage to the economy as the ones committed by a mature individual.

Based upon the scenario above, answer the questions below.

Answer the following questions:

• How would you advise Gray's clients to manage their passwords and usernames for the account to minimize the risk of fraudulent use?
• What advice would you give Gray and his clients regarding the online use of personal information? Why is online privacy an important consideration? Justify your position.
• In your opinion, which are the two most critical reasons for the difficulty in prosecuting the perpetrators of computer crimes? How is the situation complicated if the attack is carried out in a different nation than the one in which the victim or attacked system resides? Justify your answer.
• Do you think that the law should be modified to bring juveniles under the legal net? Justify your answer.

Answer 1

Solution:

1) How would you advise Gray's clients to manage their passwords and usernames for the account to minimize the risk of fraudulent use?

I will advise them to use most secure password with more combination of characters.. And another choice is using password vendor. And while typing passwords, dont select "save password / Remember password" option.

2) What advice would you give Gray and his clients regarding the online use of personal information?

As I already suggested you in above question, using password vendor. And while typing passwords, dont select "save password / Remember password" option.

3) Why is online privacy an important consideration? Justify your position.

They secure the account only from accepted IP addresses, and they will be check with other alternate sources like sending OTP to mobile, if any issue occurs. And they will make you choose mosst secure password.

4) In your opinion, which are the two most critical reasons for the difficulty in prosecuting the perpetrators of computer crimes?

First one... lack of proper knowledge in managing passwords. and another one is not having enough knowledge on browser cache and cookies option.

5) How is the situation complicated if the attack is carried out in a different nation than the one in which the victim or attacked system resides?

If this happens, one can make un- necessary transactions, so that we may lost money, or public profile or reputation may gone. We can't even put any fraud case, since we don't know how ,where, by qhom attack was done.

6) Do you think that the law should be modified to bring juveniles under the legal net? Justify your answer.

No, i don't think so, even changing laws is not correct solution. Users must be alert for such type of activities.