1. “Hacking” and Computer System Security
Chapter 4
“Hacking” and Computer System Security
Introduction
What constitutes hacking?
Consequences
Prevention
The word “hacker” has changed over time. The original definition of hacker was not negative as it is today.
Originally, a hacker was someone motivated who was trying to challenge difficult problems using his/her unique expertise. If there was no appropriate project, he/she would create one form his dreams and thoughts.
Steven Levy recognized them as the Heroes of the Computer Revolution.
Today, a hacker is someone who is trying to break into a machine without proper authorization.

2. What constitutes hacking?
A hacker is a person who engages in the unauthorized access to or use of computer systems. Here is how one uses a computer with proper authorization:
1) Uses a valid account created for his/her use buy the system administrator.
2) He/She is using the system consistent with the established guidelines and policies for the system.
Anything else, is UNAUTHORIZED.
A hacker may be involved with:
Creation of virus programs
Creation of worm programs
Creation of Trojan horse programs
Creation of logic bomb programs
Use of password sniffing to break into accounts.

3. Consequences Should we punish hackers? What is the hackers’ culture?
Are they heroes who have had significant impact on the economy or just bunch of losers who have nothing better to do?
You may say, what is better than finding a security hole in an operating system?
Are all “young computer enthusiasts” hackers? I.e. criminal or end up being one?
Hacking is viewed by many as trespassing. However, there are many different opinions about the level of punishment.
Today, many companies spend million of dollars to prevent and stop hacking. Although, hacking has made the system administrator and users be more cautious, still is being viewed negative by many. Although, hackers, have caused millions of dollars lost every year, they have made us move toward more secure systems.

4. Prevention
As it is been said justly “An ounce of prevention is worth a pound of cure”, the effort for preventing hacking must go on.
Many system managers do not see the system security as a major issue until it is too late.
There are several agencies currently working toward preparing public and others to deal with unauthorized access to the systems.
The Center for Emergency Response Team (CERT) was created in 1988 to provide valuable advice for preventing unauthorized access to systems.
There are many packages developed to help system administrator detect vulnerabilities in the systems. Some of them have created security holes unintentionally.