Добавил:
ivanov666
Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз:
Предмет:
Файл:Практический английский язык для юристов = Practical English for Law Students. В 2 частях. Ч. 2. Учебное пособие
.pdf
131
Conclusion. I assured my father that I had learned my lesson and
would never get involved in any kind of misbehavior again. I really
think so.
Reading 3
46. Read and translate Text 2C. Explain how technology has impacted the concept of crime and why computer forensics is pivotal in
law enforcement.
TEXT 2C. Cybercrimes and Importance of Computer Forensics
Cybercrimes (or high-tech crimes) are sophisticated attacks against
computer hardware and software. They can be divided into three categories: cyber-dependent crimes, cyber-enabled crimes, and crimes with digital evidence. Cyber-dependent crimes are crimes dependent on the use of
a computer, computer network or other forms of information communications technology (ICT). These include the spread of viruses or other malware, hacking, distributed denial of service (DDoS) attacks, ransomware
and cryptocurrency fraud. These activities are considered to be conducted
for the purpose of obtaining a monetary or material benefit. Consequently,
cyber-dependent crimes can only be committed by someone who has a fair
knowledge on how computers work. It becomes important when an investigation is trying to find suspects: As the knowledge needed to commit
a crime, it would be a part of the suspect’s profile.
Cyber-enabled crimes are traditional crimes facilitated by the Internet and digital technologies. They have evolved in scale and form through
the increased use of the Internet and communication technology and include drug trades, child abuse, fraud, phishing, piracy, or counterfeiting. As
such, criminals are not typically computer experts; rather, the online and
offline fraudsters or drug dealers are the same type of criminals. Cyberenabled crimes will leave traces in the digital world, which the suspects
are often not aware about.
Crimes with digital evidence. It goes without saying that a forensic
expert can look for, and expect to find, digital evidence in cybercrimes. The
132
use of digital forensics is now extremely common, particularly during criminal investigations. Digital communication and money transaction leave
digital traces that can be uncovered and used as evidence. In the modern
society, it is very hard to do anything without leaving digital traces. There
are examples where a cell phone was used to tie a suspect to a crime scene
when the cell phone was not even used, it was just present. Increasingly
there will also be digital evidence resulting from nearby CCTV (closed circuit television = замкнутая телевизионная система; система видеона-
блюдения), digital records from travel (e.g., GPS car logs (авторегистраторы с системой спутниковой навигации), bus tickets, or taxi receipts),
or possible photography and videos from other people in the nearby vicinity. It appears evident that examination of electronic information and digital
environments is very important in order to determine how a crime was
committed.
Computer forensics or digital forensics is the practice of collecting,
analyzing and reporting on digital data in a way that is legally admissible.
It can be used in the detection and prevention of crime and in any dispute
where evidence is stored digitally. Fig. 2.7 reflects the discussed processes.
Fig. 2.7. Overview of forensic process
From left to right, collect should be the process of collecting digital
evidence. In this process you target a person or a data source, which would
commonly be a device. Sometimes you target a location and look for devices or persons in that location. Data collection supplies the analysis phase
with data carriers such as hard drives. Having a person as a target would
be the normal state in a criminal investigation where you have someone
133
that is suspected of a crime. In a corporate setting, it could be more common to target a device rather than a person, and it would all depend on the
reason for doing the investigation. The process of analyzing data is more
concerned with finding out what has happened in a digital environment or
what was done using a digital device. In other words, take data carriers and
produce forensic evidence. In the final process, reporting, the findings
from the analysis are reported. The purpose of this step is mainly to report
well-grounded answers to the questions given to the examiner in the previous step. It is also of great importance that the conclusions drawn in this
step are actually conclusions that are backed up by the findings during the
examination.
The role of computer forensics in law enforcement. These days,
evidence from computer forensics investigations is increasingly used by
law enforcement to charge and prosecute cybercrimes. In fact, many police
agencies and other investigation bureaus now hire their own digital forensics teams to focus specifically on this aspect of law enforcement. The realm
of digital forensics and computer investigations has come a long way in
a relatively short period. As a result, it is now becoming possible for digital forensics investigators to revisit old evidence (and even recover evidence that was previously missed) using new tools and techniques. Specifically, advancements in data recovery have made it possible to pinpoint data and files that were not possible before.
47. Read Text 2C again and decide if the statements below are true
or false. Correct the false ones. Give reasons to your opinion.
1. Cybercrimes are deliberate attacks against computer hardware and
software. 2. Criminal acts with the help of digital technologies are performed
for the purpose of obtaining all kinds of benefit. 3. Cyber-enabled crimes
are digital crimes facilitated by the Internet and digital technologies such
as counterfeiting, computer trades, tax fraud, phishing, piracy. 4. Digital
communication and money transaction always leave digital traces. 5. GPS
car logs, bus tickets, or taxi receipts cannot be legally admissible digital
evidence. 6. Collecting is the second step of searching for digital evidence.
134
7. In a corporate setting, it could be more common to target a device rather
than a person. 8. The process of analyzing data is concerned with understanding the digital environment.
48. Discuss the following questions in the group using Text 2C.
1. What categories can cybercrimes be divided in? 2. How do these
three categories differ from one another? 3. Why can cyber-dependent crimes
only be committed by someone who has good knowledge on computers?
4. How did the Internet and digital technologies facilitate cybercrimes?
5. What is digital evidence? How can it be collected? 6. Where is digital
forensics applied? 7. What are the steps of forensic process? Describe them.
8. Why is it necessary to report well-grounded answers to the questions
given to the examiner in the analyzing step? 9. Where is evidence from
computer forensics investigations used nowadays? 10. How has it become
possible to revisit old evidence and even recover evidence that was previously missed?
Vocabulary drilling 3
49. Give Russian equivalents of the following word combinations.
Recall how they were used in Text 2С. While doing this exercise, you
may use information from exercise 54.
Cyber-dependent crimes, cyber-enabled crimes, crimes with digital
evidence, spread of viruses, hacking, distributed denial of service, ransomware, cryptocurrency fraud, obtaining a monetary or material benefit, to
facilitate investigation, phishing, counterfeiting, money transaction, leave
digital traces, crime scene, in the nearby vicinity, legally admissible, data
carriers, digital environment, produce forensic evidence, revisit old evidence,
recover evidence, advancements in data recovery, computer investigation,
well-grounded answers.
50. Match cybercrime terms with their definitions. Make up your
own sentences with these terms.
135
1.
cybercrime
a.
techniques designed to detect breaches into
a computer system or network
2.
cracking
b.
an attack that causes the targeted system
to be unable to fulfill its intended function
3.
denial of service
(DoS)
c.
the process of trying to overcome
a security measure
4.
hacking
d.
crime related to technology, computers,
and the Internet
5.
information
security
e.
the techniques to trick computer users into
revealing information or activating viruses
6.
intrusion
detection
f.
the act of illegally copying software, music,
or movies that are copyright-protected
7.
piracy
g.
a device used to record the telephone numbers
dialed by a specific telephone
8.
social
engineering
h.
a system of procedures and policies designed
to protect and control information
9.
trap and trace
device
i.
a program designed to capture information
across a computer network
10.
sniffer
j.
the process of bypassing the security systems
on a computer system or network
11.
spoofing
k.
an email containing live data intended to cause
damage to the recipient’s computer
12.
letter bomb
l.
the process of disguising one computer
user as another
51. Choose the correct option for each gap to complete the follow-
ing passage.
The Ethics of Digital Forensics
As the field of digital forensics has grown, so has concern over the
ethics of this kind of 1. ______ inspection/investigation. Perhaps the biggest concern is that of potential invasion of privacy, as 2. ______ digital/
digitized forensics investigators must often access 3. ______ sensitive/sensible data without explicit consent. In many cases, this may also be done
136
without the need for a 4. ______ warrant/order. With all this in mind, it is
essential for those working in this field to stay up to date on all 5. ______
laws/legislatives regarding 6. ______ personals’/individuals’ right to pri-
vacy and related concerns. Likewise, digital forensics investigators are expected to control their own 7. ______ personal/individual biases in their
work. The inclusion of ethics in digital forensics should be considered in
aspects of 8. ______ computer protection/information security at the university level and professional training centers. They are aspects of 9. ______
guilty mind/human knowledge, therefore they should be discussed at conferences and exercised with very little intervention of the standards of
10. ______ professional conduct/forensic expertise. This may contribute to
the student’s abilities to cope with ethical challenges.
52*. Decide what computer forensics idioms are implied in the
following sentences. Choose from the list: the weakest link, backdoor,
red flag, tip of the iceberg, in the line of fire, on the front lines, playing
with fire, lock and key, the writing on the wall, a double-edged sword.
Translate the idioms into Russian.
1. This idiom means that the most vulnerable part of a system can
compromise the entire security. 2. This idiom refers to something that is
highly secure. In computer forensics, it can be used to describe a system
that has multiple layers of protection. 3. It can be used to describe someone who is responsible for handling and mitigating the consequences of
a breach or an incident, like a security analyst. 4. It means that it has both
advantages and disadvantages. For example, the widespread use of cloud
services can enhance collaboration but also raise concerns about data privacy and security. 5. It refers to a hidden entry point in a system that bypasses the usual security measures. 6. This idiom can be used to caution
against actions like ignoring updates, or using weak passwords, which can
potentially lead to a breach or compromise. 7. This idiom implies that what
you see or know is just a small part of a much larger and complex issue.
8. This idiom can be used to describe suspicious activities or anomalies that
require immediate attention. 9. It can be used to describe situations where
137
there are visible weaknesses in a system, making it just a matter of time
before an attack occurs. 10. This idiom describes individuals or teams who
are actively defending a network or system from potential threats, like ethical hackers or security administrators.
53. Fill in the gaps (1–10) by choosing the best option (a, b, c).
How Technology Can Help Tackle Crime
The police can use technology to get 1. ______, and analyze them in
a database, and so this helps them identify criminals. By using 2. ______
we can deter people from 3. ______ crimes because they know they will
be seen and probably caught. Police use 4. _____, and motion and 5. _____
to tackle certain crimes. Algorithms on social media can be used to tackle
6. ______. Technology can help tackle crime by assisting the authorities to
7. ______ information about criminals effectively and efficiently to support their 8. ______ of a crime. I read an article about that some police forces are using 9. ______ to assess the 10. ______ of an arrested suspect to
society and if they should be kept in prison before their trial or released
from prison before their trial happens by payment of a sum of money.
No
A B C
1.
unique identifier
digital fingerprints
personal ID
2.
security car logs
CCTV cameras
satellite navigation system
3.
committing
performing
making
4.
face software
face recognition
facial reconstruction
5.
recognition imaging
sensing techniques
sensor technology
6.
cyber staking
cyber abusing
cyber bullying
7.
collect
incarcerate
confine
8.
investigation
research
examination
9.
AI methods
AI technologies
GPS techniques
10.
probable hazard
possible menace
potential threat
Speaking 3
54*. Read the text about types of cybercrime, then render it in
English orally.
138
Основные виды киберпреступности
Общепринятого определения киберпреступности не существует.
В первую очередь это связано с тем, что киберпреступность является
междисциплинарной темой. Поэтому определения киберпреступности,
как правило, варьируют в зависимости от принадлежности толковате-
лей к той или иной научной или профессиональной дисциплине. Од-
ни авторы склонны рассматривать киберпреступность с точки зрения
уровня трансформации преступного поведения под воздействием циф-
ровых и сетевых коммуникационных технологий, когда преступление
совершается с помощью этих технологий (преступления, совершаемые
с использованием кибертехнологий) или посредством этих техноло-
гий (преступления, совершаемые посредством кибертехнологий),
зависят от этих технологий (киберзависимые преступления), либо свя-
заны с незаконным контентом (правонарушения, связанные с содер-
жанием компьютерных данных).
Правонарушения, связанные с использованием компьютерных
технологий, включают в себя преступления, совершаемые посредством
кибертехнологий, в целях извлечения личной или финансовой прибы-
ли, или причинения личного или финансового вреда. К этой категории
отнесены киберпреступления, в случае которых использование ком-
пьютерной системы или цифрового устройства является частью
способа совершения преступления, а именно: компьютерное мошенничество или подлог; компьютерные преступления, связанные с использованием персональных данных; распространение или контроль
распространения спама; компьютерные преступления, касающиеся ав-
торских прав или товарных знаков; деяния, предполагающие исполь-
зование компьютера в целях причинения личного вреда; деяния, пред-
полагающие использование компьютера в целях завлечения детей
в преступную деятельность. К киберзависимым преступлениям относятся те преступления, которые нацелены на системы, сети и данные.
Они совершаются с целью нарушения конфиденциальности (т.е. ко-
гда системы, сети и данные защищены, и только авторизованные поль-
зователи могут получить к ним доступ), целостности (т.е. когда дан-
139
ные являются точными и достоверными и не подвергались изменениям)
и доступности (т.е. когда данные, услуги и системы доступны по пер-
вому требованию). Эти киберпреступления включают в себя хакерские
атаки; создание, хранение и распространение вредоносных программ;
атаки типа «отказ в обслуживании» (DoS); распределенные атаки ти-
па «отказ в обслуживании» (DDoS); порча веб-сайтов. Правонаруше-
ния, связанные с содержанием компьютерных данных, имеют прямое
отношение к незаконному контенту, хранящемуся в компьютере зло-
умышленника. Такими данными могут быть расистские и ксенофобские материалы, которые означают любые письменные материалы,
изображение или любое другое представление идей или теорий, которые пропагандируют, способствуют или подстрекают к ненависти,
дискриминации, насилию против личности или группы лиц, если в качестве предлога к этому используются факторы, основанные на расе,
цвете кожи, национальном или этническом происхождении, а также
религии. Показательным примером незаконного контента являются ма-
териалы с изображением сексуального насилия над детьми. В соответствии со статьей 9 «Конвенции Совета Европы о киберпреступности»
лицо считается совершившим преступление в случае преднамеренного и противоправного совершения им следующих деяний: владение,
производство, приобретение, предложение или предоставление в поль-
зование детской порнографической продукции, находящейся в ком-
пьютерной системе или на носителях компьютерных данных, а также
её распространение через компьютерную систему.
Другие авторы анализируют киберпреступность с точки зрения
различных преступных действий или способов совершения преступ-
ления, таких как преступления против компьютера (хакерские атаки)
или преступления с использованием компьютера (например, мошенничество, травля), или преступления в компьютере (размещение ма-
териалов экстремального, сексуального, ненавистнического или терро-
ристического характера). Третьи авторы исследуют киберпреступность
с точки зрения воздействия киберпреступности, например, на политику, политическую систему и правительства. Несмотря на то, что су-
140
ществуют значительные вариации в подходах к толкованию киберпре-
ступности, большинство киберпреступлений подпадают под эти три
набора динамических моделей и любое достоверное определение ки-
берпреступности должно охватывать все эти модели.
Таким образом, киберпреступность включает в себя «новые» пре-
ступления — те, которые стали возможными благодаря существованию информационно-коммуникационных технологий (ИКТ), — например, преступления, направленные против неприкосновенности частной
жизни, конфиденциальности, целостности и доступности компьютерных данных и систем, а также традиционные преступления, совершению которых в той или иной степени способствуют ИКТ, включая правонарушения, связанные с использованием компьютерных средств,
и правонарушения, связанные с содержанием компьютерных данных.
Однако важно отметить, что киберпреступность также включает в себя те «существующие преступления», такие как мошенничество, об-
ман, травля и домогательство, которые приобрели более широкий охват
благодаря цифровым и сетевым технологиям.
55. Consider the following cases in groups. Find the solutions to
the case problems. Express your opinions.
Case 1. Royal Mail refused to pay £66m LockBit ransom demand.
By any measure, the LockBit ransomware crew’s January 2023 hit
on Royal Mail was the most widely talked about cyber-attack in the UK.
The incident, which targeted a major distribution center near Heathrow
Airport, crippled the organization’s international shipping service and left
both consumers and businesses unable to send letters and parcels overseas.
Over a month after the initial attack, things were still not back to
normal, as it emerged that LockBit was demanding a stratospheric ransom
of nearly £70m, which Royal Mail refused to pay, saying it was an “ab-
surd” sum. Royal Mail has since spent over £10m on remedial measures.
Questions: What is the case problem? What cybercrime was committed? How serious were the consequences of the crime? Did Royal Mail
behave correctly? Was his decision not to pay criminals appropriate and
Соседние файлы в предмете [НЕСОРТИРОВАННОЕ]