page 350
203
HOW TO STOP COMPUTER ABUSE
More and more, the operations of our businesses, governments, and financial institutions are controlled by information that exists only inside computer memories. Anyone clever enough to modify this information for his own purposes can reap substantial rewards. Even worse, a number of people who have done this and been caught at it have managed to get away without punishment. A recent Stanford Research Institute study of computer abuse was based on 160 case histories, which probably are just the tip of the iceberg. After all, we only know about the unsuccessful computer crimes. How many successful ones have gone undetected is anybody's guess.
For the last decade or so, computer programmers have concentrated on making it easy for people to use computer systems1 Unfortunately, in some situations the systems are all too easy to use; they don't impose nearly enough restrictions to safeguard confidential information or to prevent unauthorized persons from changing the information in a file.
A computer system needs a sure way of identifying the people who are authorized to use it. The identification procedure has to be quick and convenient Besides, it should be so thorough that there is little chance of the computer being fooled by a clever imposter, who dishonestly pretends to be an authorized user. At the same time, the computer must not reject legitimate users. Unfortunately, no identification system currently in use meets all these requirements.
At present, signatures are widely used to identify credit-card holders, but it takes an expert to detect a good forgery. Sometimes even a human expert is deceived, and there is no reason to believe that a computer could do any better. A variation is to have the computer analyse a person's hand movements as he signs his name instead of analysing the signature itself. Advocates of this method claim that different persons' hand movements are sufficiently distinct to identify them. And while a forger might learn to duplicate another person's signature, he probably would not move his hand exactly the way the person whose signature he was forging did.
Photographs are also sometimes used for identification. But, people find it inconvenient to stop by a bank or credit-card company and be photographed. Companies might lose business if they made the pictures an absolute requirement. Also, photographs are less useful these days, when people frequently change their appearance by changing the way they wear their hair. Finally, computer programmes for analyzing photographs are still highly experimental.
Dostları ilə paylaş: |