Rachel

Questions The data/information that Stuxnet was trying to exploit was Siemens industrial software and equipment which was running on Microsoft Windows, mainly effecting Iran through getting into their power plants, traffic control systems and factories. It could tell the computers to turn up pressure in nuclear reactors yet not be detected. Stuxnet was successful as it was 22X more complex than any previous virus code. It used a ligament security clearance stolen from one of the most reputable computer technology companies in the world making it harder to detect as it didn’t carry the usual forged security clearance. This clearance used is known as Zero Days can be bought on the black market for $100 000 and the creators used 20 which didn’t active until a specific target triggered it. Stuxnet could be used to get into classified government security systems contain confidential and dangerous information that should not be known by the public. This information could easily be leaked and cause chaos around the world. This system could also be used to physically destroy a country by setting off the nuclear power plants as well as other weapons such as bombs etc, exploiting security gaps in any system. Zero days are a computer threat that tries to exploit computer application vulnerabilities that are unknown to others or the software developer. Zero Days are useful to hackers in breaching security as the attack can occur without the developers awareness, meaning the developer had no opportunity to distribute a security fix to users of the software.
 * 1) ** __Basic question:__ Identify what data/ information was Stuxnet trying to exploit. **
 * 1) ** Explain what made Stuxnet so successful? Explain using examples **
 * 1) ** Describe what else could Stuxnet be used to exploit? Who else’s information/data is vulnerable? **
 * 1) ** __Extension Question:__ Research what zero days are. Why are zero days so useful to hackers in breaching security? **

**Homework:**

Data matching is a law enforcement tool allowing information from a variety of sources to be brought together. It is much cheaper than manual methods and assists to ensure everyone pays their fair share of tax.

This software compares the information recorded by employers, financial institutes, companies, health finds and government agencies who report these details of income together with any other tax-related information to the Australian Taxation Office with your self assessment and tax claims. Assistance agencies provide the data matching program with client data including tax file numbers and identity details which are matched and compared. This data is then passed via Centrelink and used for a series of matching exercises and then returned to the Tax Office where personal client information is found including identity, declared income, date of most recent taxation assessment, amount of the spouse tax and surname or any other name which tax is claimed. From these extensive comparisons of information from a variety of sources the software can determine whether the citizen is paying their fair share of tax.