Page 258 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

providers and traced the email to a computer in the school library.
At 12:15 p.m., he confronted the suspect with surveillance tapes

showing him at the computer in the library as well as audit logs
conclusively proving that he had sent the email. The student
quickly admitted that the threat was nothing more than a ploy to
get out of school a couple of hours early. His explanation? “I didn’t
think there was anyone around here who could trace stuff like
that.”

He was wrong.

A number of criminal laws serve to protect society against computer
crime. In later sections of this chapter, you’ll learn how some laws,

such as the Computer Fraud and Abuse Act, the Electronic
Communications Privacy Act, and the Identity Theft and Assumption
Deterrence Act (among others), provide criminal penalties for serious
cases of computer crime. Technically savvy prosecutors teamed with
concerned law enforcement agencies have dealt serious blows to the
“hacking underground” by using the court system to slap lengthy

prison terms on offenders guilty of what used to be considered
harmless pranks.

In the United States, legislative bodies at all levels of government
establish criminal laws through elected representatives. At the federal
level, both the House of Representatives and the Senate must pass
criminal law bills by a majority vote (in most cases) in order for the bill

to become law. Once passed, these laws then become federal law and
apply in all cases where the federal government has jurisdiction
(mainly cases that involve interstate commerce, cases that cross state
boundaries, or cases that are offenses against the federal government
itself). If federal jurisdiction does not apply, state authorities handle
the case using laws passed in a similar manner by state legislators.

All federal and state laws must comply with the ultimate authority that

dictates how the United States (U.S.) system of government works—
the U.S. Constitution. All laws are subject to judicial review by regional
courts with the right of appeal all the way to the Supreme Court of the
United States. If a court finds that a law is unconstitutional, it has the
power to strike it down and render it invalid.