DATA DIDDLING
Submitted TO: Submitted By: Kanisk Jain Gaurav Gupta Vatan Mishra
Outline
Data Diddling Cyber crime Example of data diddling Case study Act
Data Diddling
• Changing data prior or During input into computer.
• To change the data just before it is processed by a computer
AND• Changing it back after the processing is
completed.
• This kind of an attack involves altering raw data.
What is Data Diddling?
Data diddling cases include:• banks records• payrolls• inventory data • credit records and
virtually all other applications of data processing.
• It is a part of cyber crime.
Cyber Crime
• Use of computer/internet to do something that would be a crime in any case.
• In Cyber Crime computer is the target of a crime.
• Computer forensics is the process of identifying, preserving and analyzing.
Example of data diddling
Example:1Employer order a peon to deposit Rs.10000/- cash
into an account.– He prepares a receipt of deposit only worth Rs.1000
and deposits only Rs.1000 in the bank.• Now he needs to give this receipt to his employer.
– So he again modifies the receipt of deposit worth Rs.10000/- and gives it to the employer.
• Employer gets a feeling that entire amount of Rs.10000 is deposited however
– Only a small portion is actually deposited in the bank.
Example of Data DiddlingData Diddling
Man-in-the-middle attack / exploit
Transfer Rs.100000 to account no. 123
Transfer Rs.100000 to account no. 456
Rs.100000 transferred to account no. 456
Sender
Intruder / Hacker
Receiver
Rs.100000 transferred to account no. 123
Case
• Data Diddling: (Case Study)– NDMC (New Delhi Municipal Corporation)
Electricity Billing Fraud Case in 1996:• NDMC was trying to computerize the entire system such
as:– Money collection, accounting, record maintenance, deposit in
the bank etc.• It was given to a private contractor who was a computer
professional.• He misappropriated large amount of money by changing
data files to show less receipt and bank deposits.
Act
• Section 66 and 43(d) of the I.T. Act covers the offence of data diddling
• Penalty: damages not exceeding Rs. One crore to the affected
party
Act
Section 43• Whoever without permission of owner of the
computer U/A access. Downloads, copies, extracts any data Introduces any viruses or contaminant Destroy, alter, delete, add, modify or rearrange of data Change the format of a file.
Act 66
• Section 66 cover Hacking with Computer systems AND Data
alteration• Punishment: imprisonment up to three years, and or fine up to Rs. 2 lakh
Thank You
Top Related