NESTA Crime Online - University of Brighton Repository

14) Hacker: person involved in computer security/insecurity, specialising in the
discovery of exploits in systems (for exploitation or prevention), or in obtaining or
preventing unauthorised access to systems through skills, tactics and detailed
knowledge. Depending of the motivation there are differentiations between black-hat
hacker (a malicious or criminal hacker), white-hat hacker (ethical hackers) and grey-hat
hackers (ethically ambiguous).
15) Honeypot: an individual computer or a network of machines set up to look like a
poorly protected system but which records every attempt, successful or otherwise, to
compromise it. Often the first hints of a new rash of malicious programs come from the
evidence collected by honeypots. Now cybercriminals are tuning their malware to spot
when it has compromised a honeypot and to leave without taking over.
16) IP Address: the numerical identifier that every machine attached to the Internet
needs to ensure the data it requests returns to the right place. IP is an acronym of
Internet Protocol and the technical specification defines how this numerical system
works.
17) Malware: portmanteau term for all malicious software covers any unwanted
program that makes its way on to a computer. Derived from Malicious software.
18) Peer-to-peer networks (P2P): in a P2P network the ‘peers’ are computer
systems that are connected to each other via the Internet. Files can be shared directly
between systems on the network without the need of a central server. In other words,
each computer on a P2P network becomes a file server as well as a client. Once
connected to the network, P2P software allows you to search for files on other people's
computers. Meanwhile, other users on the network can search for files on your
computer, but typically only within a single folder that you have designated to share.
19) Phishing: the criminally fraudulent process of attempting to acquire sensitive
information such as usernames, passwords and credit card details, by masquerading as
a trustworthy entity in an electronic communication. The practice is often done by
sending e-mails that look as if they come from a financial institution and that seek to
trick people into handing over confidential details. Often they direct people to another
website that looks like that of the bank or financial institution the e-mail purports to
have come from.
Page 94