{"id":6392,"date":"2012-09-20T20:50:20","date_gmt":"2012-09-21T00:50:20","guid":{"rendered":"http:\/\/rbach.net\/blog\/?p=6392"},"modified":"2021-07-19T14:00:24","modified_gmt":"2021-07-19T18:00:24","slug":"students-insider-threat-at-k12-schools","status":"publish","type":"post","link":"https:\/\/rbach.net\/index.php\/students-insider-threat-at-k12-schools\/","title":{"rendered":"Students &#8211; Insider Threat At K12 Schools"},"content":{"rendered":"<p><em><a href=\"http:\/\/www.itpro.co.uk\/635356\/the-sun-warns-readers-of-data-theft\" target=\"_blank\" rel=\"noopener noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-102205\" title=\"Students - Insider Threat At K12 Schools\" src=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/insider_threat-e1567115005852-150x104.jpg?resize=144%2C100&#038;ssl=1\" alt=\"Students - Insider Threat At K12 Schools\" width=\"144\" height=\"100\" srcset=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/insider_threat-e1567115005852.jpg?resize=150%2C104&amp;ssl=1 150w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/insider_threat-e1567115005852.jpg?resize=75%2C52&amp;ssl=1 75w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/insider_threat-e1567115005852.jpg?w=395&amp;ssl=1 395w\" sizes=\"auto, (max-width: 144px) 100vw, 144px\" \/><\/a>I have spoken to several tech people outside of K-12 lately. When the topic of information security comes around, they talk about how much they are focusing on the &#8220;growing i<strong>nsider threat<\/strong>&#8221; their employers face. I always smile because those of us in K12 have always faced a <strong>hostile internal threat<\/strong>, students. Here are a couple of examples of how students can be an insider threat at school.<\/em><\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-102210 size-medium\" title=\"student hackers changed grades\" src=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/ILuvYourPC-2-e1567115200159-150x96.jpg?resize=150%2C96&#038;ssl=1\" alt=\"student hackers changed grades\" width=\"150\" height=\"96\" srcset=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/ILuvYourPC-2-e1567115200159.jpg?resize=150%2C96&amp;ssl=1 150w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/ILuvYourPC-2-e1567115200159.jpg?resize=75%2C48&amp;ssl=1 75w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/ILuvYourPC-2-e1567115200159.jpg?w=281&amp;ssl=1 281w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/>At Colorado&#8217;s Jefferson County K12 Schools <a href=\"http:\/\/www.9news.com\/\" target=\"_blank\" rel=\"noopener noreferrer\"><em>KUSA<\/em><\/a> <a title=\"Students hack into school system, change grades\" href=\"http:\/\/www.9news.com\/news\/story.aspx?storyid=63092&amp;catid=222\" target=\"_blank\" rel=\"noopener noreferrer\">reports<\/a> that administrators are investigating reports that <strong>student hackers<\/strong> got into Golden High School\u2019s computer system and <strong>changed grades<\/strong>. Investigators are looking into whether students inside the school hacked the campus portal system. A student said, \u201cPeople started giving themselves A\u2019s.\u201d<\/p>\n<p>Golden High School students told the media that the hackers changed the grades for themselves and others just before winter break and the end of the first semester.<\/p>\n<p>Administrators do not even know how many grades were changed. It could be low as 15 students or as high as 200. The district will not say if any students were caught or how many are suspected of hacking into the system.<\/p>\n<p><a href=\"http:\/\/ugaadmissions.blogspot.com\/2011\/11\/grades-vs-gpa.html\" target=\"_blank\" rel=\"noopener noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-102214 size-medium\" title=\"do not even know how many grades were changed\" src=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/grades3-e1567115376376-150x99.jpg?resize=150%2C99&#038;ssl=1\" alt=\"do not even know how many grades were changed\" width=\"150\" height=\"99\" srcset=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/grades3-e1567115376376.jpg?resize=150%2C99&amp;ssl=1 150w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/grades3-e1567115376376.jpg?resize=75%2C49&amp;ssl=1 75w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/grades3-e1567115376376.jpg?w=408&amp;ssl=1 408w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/><\/a>Jefferson County Schools Superintendent Cindy Stevenson told local TV her staff is <strong>working hard to find out how it happened<\/strong>. When they do, she says <strong>security will be improved<\/strong>.<\/p>\n<h3>Berkeley High School<\/h3>\n<p>Prestigious <a title=\"Berkeley High School (Berkeley, California)\" href=\"http:\/\/web.archive.org\/web\/20111206192322\/http:\/\/bhs.berkeley.net:80\/\" target=\"_blank\" rel=\"homepage noopener noreferrer\">Berkeley High School<\/a> in Berkeley CA succumbed to the student insider threats. The media reports nearly three dozen students were suspended and face expulsion for <strong>hacking into the K12 school&#8217;s attendance system<\/strong>, an act that could lead to criminal prosecution <a title=\"Berkeley High students hack into attendance system\" href=\"https:\/\/www.sfgate.com\/bayarea\/article\/Berkeley-High-students-hack-into-attendance-system-3495327.php\" target=\"_blank\" rel=\"noopener noreferrer\">according to<\/a> <a title=\"SFGate\" href=\"https:\/\/www.sfgate.com\/\" target=\"_blank\" rel=\"noopener noreferrer\"><em>SFGate<\/em><\/a>. At least four students used an administrator&#8217;s <strong>stolen password<\/strong> to clear tardies and unexcused absences from the permanent records of 50 students, offering the service or the password for a price, Principal Pasquale Scuderi said.<\/p>\n<p>The hackers erased from the system hundreds of cut classes and tardies from October through December, and charged classmates $2 to $20 for the illicit help, Scuderi told the <em>SFGate<\/em>.<\/p>\n<h3>Orange County K12 schools<\/h3>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-102217 size-medium\" title=\"student insider threat\" src=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/data_thief-4-e1567115582713-95x150.jpg?resize=95%2C150&#038;ssl=1\" alt=\"student insider threat\" width=\"95\" height=\"150\" srcset=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/data_thief-4-e1567115582713.jpg?resize=95%2C150&amp;ssl=1 95w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/data_thief-4-e1567115582713.jpg?resize=48%2C75&amp;ssl=1 48w, https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/data_thief-4-e1567115582713.jpg?w=160&amp;ssl=1 160w\" sizes=\"auto, (max-width: 95px) 100vw, 95px\" \/>The student insider threat struck K12 schools in <a title=\"Orange County, California\" href=\"http:\/\/www.ocgov.com\" target=\"_blank\" rel=\"homepage noopener noreferrer\">Orange County, California<\/a>. Omar Khan a former student of <a title=\"Tesoro High School\" href=\"https:\/\/tesoro.capousd.org\/\" target=\"_blank\" rel=\"homepage noopener noreferrer\">Tesoro High School<\/a>, pled guilty to charges of having <strong>installed spyware<\/strong> on his high school&#8217;s computers and having used the <strong>collected passwords<\/strong> to get access to the grading system and change his grades according to <em><a title=\"CSO Online\" href=\"http:\/\/www.csoonline.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">CSO Online<\/a><\/em>.<\/p>\n<p>Khan and another student, Tanvir Singh were arrested for breaking into the school&#8217;s assistant principal&#8217;s office at night. Khan&#8217;s goal was to destroy the evidence that he cheated on a statistics test by stealing it.<\/p>\n<p>Khan had faced a maximum of 38 years in prison on the felony burglary and public-record tampering charges is expected to be sentenced to 30 days in jail, 500 hours of community service, and ordered to pay about $15,000 in restitution.<\/p>\n<p><a href=\"http:\/\/www.patheos.com\/blogs\/christophers\/2012\/05\/putting-love-where-there-is-no-love-sister-rosemary-dowds-jail-ministry\/\" target=\"_blank\" rel=\"noopener noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-102223\" title=\"years in prison on the felony public-record tampering charges\" src=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/jail_time.jpg?resize=116%2C100&#038;ssl=1\" alt=\"years in prison on the felony public-record tampering charges\" width=\"116\" height=\"100\" \/><\/a>The article says Khan admitted he was guilty of breaking into school offices and installing spyware on computers and then using the passwords to change some of his grades and that of 12 other students.<\/p>\n<p>He also acknowledged that he changed his transcript grades to appeal rejection letters from the <a title=\"University of Southern California\" href=\"https:\/\/www.usc.edu\/\" target=\"_blank\" rel=\"fdbcolleges noopener noreferrer\">University of Southern California<\/a>, the <a title=\"University of California, Berkeley\" href=\"http:\/\/maps.google.com\/maps?ll=37.87,-122.259&amp;spn=0.01,0.01&amp;q=37.87,-122.259%20%28University%20of%20California%2C%20Berkeley%29&amp;t=h\" target=\"_blank\" rel=\"geolocation noopener noreferrer\">University of California, Berkeley<\/a>, and the <a title=\"University of California, Los Angeles\" href=\"http:\/\/www.ucla.edu\" target=\"_blank\" rel=\"homepage noopener noreferrer\">University of California, Los Angeles<\/a>.<\/p>\n<h3>Nevada salutation<\/h3>\n<p><a title=\"PC World\" href=\"http:\/\/web.archive.org\/web\/20140421004057\/http:\/\/www.pcworld.com\/\" target=\"_blank\" rel=\"noopener noreferrer\"><em>PC World<\/em><\/a> <a title=\"Student charged with operating grade fixing scheme\" href=\"http:\/\/web.archive.org\/web\/20120707071009\/http:\/\/www.pcworld.com:80\/businesscenter\/article\/221442\/top_student_charged_with_fixing_grades_for_cash.html\" target=\"_blank\" rel=\"noopener noreferrer\">reports<\/a> that in <a title=\"Pahrump, Nevada\" href=\"http:\/\/goo.gl\/maps\/LwSe\" target=\"_blank\" rel=\"noopener noreferrer\">Pahrump, Nevada<\/a>, K12 schools Tyler Coyner<em>,<\/em> <a href=\"https:\/\/web.archive.org\/web\/20210305195050\/https:\/\/pvalley-hs.nye.k12.nv.us\/\" target=\"_blank\" rel=\"noopener noreferrer\">Pahrump Valley High School&#8217;<\/a>s 2010 salutation with a 4.54-grade point average, was arrested as the ringleader in a group of 13 students who have been charged with conspiracy, theft, and <strong><a title=\"Black Hat Hacker\" href=\"https:\/\/www.techopedia.com\/definition\/26342\/black-hat-hacker\" target=\"_blank\" rel=\"noopener techopedia noreferrer\">computer intrusion<\/a><\/strong>. The article states that Coyner somehow obtained a password to the school&#8217;s grade system and, over the course of two semesters, offered to change grades in return for cash payments.<\/p>\n<p><a href=\"https:\/\/web.archive.org\/web\/20110425072458\/http:\/\/specialkindofstupid.com:80\/2010\/12\/20\/important-skos-news\/\" target=\"_blank\" rel=\"noopener noreferrer\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-102227\" title=\"salutation arrested as the ringleader in a group of students charged with conspiracy and computer intrusion.\" src=\"https:\/\/i0.wp.com\/rbach.net\/wp-content\/uploads\/nerdy_hacker.jpg?resize=100%2C108&#038;ssl=1\" alt=\"salutation arrested as the ringleader in a group of students charged with conspiracy and computer intrusion.\" width=\"100\" height=\"108\" \/><\/a>According to <em>PC World<\/em>, ten juveniles have also been arrested for having profited from Coyner&#8217;s offer to bump up their grades. It turns out that Coyner, somewhat foolishly &#8211; chose to make himself the one that profited most from his scheme. In fact, the 4.54-grade point average that made him the school&#8217;s salutation is the result of his own grade manipulation.<\/p>\n<p><strong><em>rb-<\/em><\/strong><\/p>\n<p><em>Looks like Coyner is gotten a head start on his dream of becoming a Wall Street hedge fund trader by facing criminal charges as a student insider threat at school.<br \/>\n<\/em><\/p>\n<p>&nbsp;<\/p>\n<p><em><a title=\"Ralph Bach\" href=\"https:\/\/rbach.net\/index.php\/new-resume\/\" target=\"_blank\" rel=\"noopener noreferrer\">Ralph Bach<\/a>\u00a0has been in IT long enough to know better and has blogged from his\u00a0<a title=\"Bach Seat\" href=\"https:\/\/rbach.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">Bach Seat<\/a> about IT, careers, and anything else that catches his attention since 2005. You can follow him on <a class=\"broken_link\" href=\"http:\/\/www.linkedin.com\/in\/rb48334\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">LinkedIn<\/a>,\u00a0<a href=\"https:\/\/www.facebook.com\/ralph.bach.14\" target=\"_blank\" rel=\"noopener noreferrer\">Facebook<\/a>,\u00a0and\u00a0<a href=\"https:\/\/twitter.com\/rbach48334\" target=\"_blank\" rel=\"noopener noreferrer\">Twitter<\/a>. Email the Bach Seat\u00a0<a href=\"mailto:\/\/bach.seat@gmail.com\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Student hackers breaking into K12 school computer systems to change the grades for themselves and others if caught they face years of jail time<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[2197,67,1372,2483,128,209,951,4,1371],"class_list":["post-6392","post","type-post","status-publish","format-standard","hentry","category-security","tag-2197","tag-hack","tag-high-school","tag-insider-threat","tag-k12","tag-password","tag-pii","tag-security","tag-student"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/6392","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/comments?post=6392"}],"version-history":[{"count":12,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/6392\/revisions"}],"predecessor-version":[{"id":131016,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/posts\/6392\/revisions\/131016"}],"wp:attachment":[{"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/media?parent=6392"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/categories?post=6392"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rbach.net\/index.php\/wp-json\/wp\/v2\/tags?post=6392"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}