So if the United States can get the attackers, they
will attempt to prosecute them no matter where they live in the world.
The CFAA has been used to prosecute many people for various crimes. There are two
types of unauthorized access that can be prosecuted under the CFAA. These include
wholly unauthorized access by outsiders, and also situations where individuals, such as
employees, contractors, and others with permission, exceed their authorized access and
Chapter 2: Ethical Hacking and the Legal System
23
Gray Hat Hacking: The Ethical Hacker??™s Handbook
24
commit crimes. The CFAA states that if someone accesses a computer in an unauthorized
manner or exceeds his access rights, he can be found guilty of a federal crime. This
helps companies prosecute employees when they carry out fraudulent activities by abusing
(and exceeding) the access rights the companies have given to them. An example of
this situation took place in 2001 when several Cisco employees exceeded their system
Crime Punishment Example
Acquiring national defense, foreign relations, or
restricted atomic energy information with the
intent or reason to believe that the information can
be used to injure the U.S. or to the advantage of
any foreign nation.
Pages:
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98