DATA DIDDLING

Submitted TO: Submitted By: Kanisk Jain Gaurav Gupta Vatan Mishra

Outline

Data Diddling Cyber crime Example of data diddling Case study Act

Data Diddling

• Changing data prior or During input into computer.

• To change the data just before it is processed by a computer

AND• Changing it back after the processing is

completed.

• This kind of an attack involves altering raw data.

What is Data Diddling?

Data diddling cases include:• banks records• payrolls• inventory data • credit records and

virtually all other applications of data processing.

• It is a part of cyber crime.

Cyber Crime

• Use of computer/internet to do something that would be a crime in any case.

• In Cyber Crime computer is the target of a crime.

• Computer forensics is the process of identifying, preserving and analyzing.

Example of data diddling

Example:1Employer order a peon to deposit Rs.10000/- cash

into an account.– He prepares a receipt of deposit only worth Rs.1000

and deposits only Rs.1000 in the bank.• Now he needs to give this receipt to his employer.

– So he again modifies the receipt of deposit worth Rs.10000/- and gives it to the employer.

• Employer gets a feeling that entire amount of Rs.10000 is deposited however

– Only a small portion is actually deposited in the bank.

Example of Data DiddlingData Diddling

Man-in-the-middle attack / exploit

Transfer Rs.100000 to account no. 123

Transfer Rs.100000 to account no. 456

Rs.100000 transferred to account no. 456

Sender

Intruder / Hacker

Receiver

Rs.100000 transferred to account no. 123

Case

• Data Diddling: (Case Study)– NDMC (New Delhi Municipal Corporation)

Electricity Billing Fraud Case in 1996:• NDMC was trying to computerize the entire system such

as:– Money collection, accounting, record maintenance, deposit in

the bank etc.• It was given to a private contractor who was a computer

professional.• He misappropriated large amount of money by changing

data files to show less receipt and bank deposits.

Act

• Section 66 and 43(d) of the I.T. Act covers the offence of data diddling

• Penalty: damages not exceeding Rs. One crore to the affected

party

Act

Section 43• Whoever without permission of owner of the

computer U/A access. Downloads, copies, extracts any data Introduces any viruses or contaminant Destroy, alter, delete, add, modify or rearrange of data Change the format of a file.

Act 66

• Section 66 cover Hacking with Computer systems AND Data

alteration• Punishment: imprisonment up to three years, and or fine up to Rs. 2 lakh

Thank You