Data Diddling 5n6v55

DATA DIDDLING

    

Data Diddling Cyber crime Example of data diddling Case study Act

• Changing data prior or During input into computer. • To change the data just before it is processed by a computer AND • Changing it back after the processing is completed. • This kind of an attack involves altering raw data.

Data diddling cases include: • banks records • payrolls • inventory data • credit records and virtually all other applications of data processing. • It is a part of cyber crime.

• Use of computer/internet to do something that would be a crime in any case. • In Cyber Crime computer is the target of a

crime. • Computer forensics is the process of identifying, preserving and analyzing.

Example:1

Employer order a peon to deposit Rs.10000/- cash into an . – He prepares a receipt of deposit only worth Rs.1000 and deposits only Rs.1000 in the bank. • Now he needs to give this receipt to his employer. – So he again modifies the receipt of deposit worth Rs.10000/- and gives it to the employer. • Employer gets a feeling that entire amount of Rs.10000 is deposited however – Only a small portion is actually deposited in the bank.

Data Diddling Man-in-the-middle attack / exploit

Transfer Rs.100000 to no. 123

Rs.100000 transferred to no. 456

Sender

Receiver

Intruder / Hacker

• Data Diddling: (Case Study) – NDMC (New Delhi Municipal Corporation) Electricity Billing Fraud Case in 1996: • NDMC was trying to computerize the entire system such as: – Money collection, ing, record maintenance, deposit in the bank etc.

• It was given to a private contractor who was a computer professional. • He misappropriated large amount of money by changing data files to show less receipt and bank deposits.

• Section 66 and 43(d) of the I.T. Act covers the offence of data diddling • Penalty: damages not exceeding Rs. One crore to the affected party

Section 43

• Whoever without permission of owner of the computer U/A access.    

s, copies, extracts any data Introduces any viruses or contaminant Destroy, alter, delete, add, modify or rearrange of data Change the format of a file.

• Section 66 cover Hacking with Computer systems AND Data alteration • Punishment: imprisonment up to three years, and or fine up to Rs. 2 lakh

Thank You