Saturday, February 23, 2008

Should spoofing be a part of cyber crime law? Why or why not?



Spoofiing means pretending to be someone else. This is done by creating a TCP/IP packet by using someone else IP.


IP spoofing is the most common type of the on-line disguise. An unauthorized computer or network access is gained by the attacker. The spoofer makes it appear that a malicious message has come from a trusted machine by spoofing the IP address which is illegal. The malicious host then controls the flow of the communication and can alter or even remove the information sent by one of the orignal participant without the sender or recipient knowing.


According to the Budapest convention Article 7 , computer related forgery, if done intentionally and without any right i.e deleting or altering computer data is illegal. Therefore anyone involved in spoofing should be punished if and only if it causes serious harm or loss to anyone. There is no clear solution for this as banning IP alone is totally ineffective and pointless as it can easily be spoofed.


Reference

http://www.ictlex.net/index.php/2003/01/28/budapest-convention-on-cybercrime/

No comments: