🔒Network Security and Forensics Unit 9 Review

Intellectual property (IP) refers to creations of the mind: inventions, literary and artistic works, designs, symbols, names, and images used in commerce. Protecting IP matters because it gives creators and businesses a legal incentive to innovate. If anyone could freely copy an invention or brand, there'd be far less reason to invest time and money in creating something new.

There are four main types of IP, each protecting a different kind of creation.

Patents for Inventions

Patents grant inventors exclusive rights to their novel, non-obvious, and useful inventions. That exclusivity means the patent holder can prevent others from making, using, selling, or importing the invention.

Patent protection typically lasts 20 years from the filing date
Patentable inventions include processes, machines, manufactures, compositions of matter, or improvements to any of these
Classic examples: Alexander Graham Bell's telephone, Thomas Edison's light bulb
In tech, patents cover things like specific algorithms implemented in hardware, chip designs, or novel network protocols

Trademarks for Brand Identity

Trademarks protect words, names, symbols, sounds, or colors that distinguish one company's goods or services from another's. Their core purpose is helping consumers identify the source of a product.

Trademark protection can last indefinitely, as long as the mark stays in active commercial use and doesn't become generic (like "aspirin" did)
Registration isn't strictly required for protection, but it strengthens enforcement
Examples: the Nike swoosh, McDonald's golden arches, the Intel chime sound

Copyrights for Original Works

Copyrights protect original works of authorship, including literary, musical, dramatic, and artistic works, plus computer software.

Copyright owners get exclusive rights to reproduce, distribute, perform, display, and create derivative works based on their creation
Protection generally lasts for the life of the author plus 70 years, after which the work enters the public domain
Examples: novels (To Kill a Mockingbird), songs (Bohemian Rhapsody), films (The Godfather), and software source code

Trade Secrets for Confidential Information

Trade secrets are confidential business information that gives a company a competitive edge. Unlike patents, trade secrets have no registration process and no expiration date.

Protection lasts only as long as the information remains confidential and isn't independently discovered or reverse-engineered
Trade secrets can include formulas, patterns, compilations, programs, methods, techniques, or processes
Examples: the Coca-Cola formula, Google's search ranking algorithm
For security professionals, trade secret theft is a common form of corporate espionage and a frequent subject of forensic investigations

Copyright Fundamentals

Copyright is the area of IP law most relevant to day-to-day work in network security and forensics. You'll encounter copyrighted digital content constantly, so understanding how copyright works is non-negotiable.

Definition of Copyright

Copyright is a legal right granting the creator of an original work exclusive control over its use and distribution. Protection applies automatically the moment an original work is fixed in a tangible medium of expression, whether that's a printed page, an audio recording, or a file saved on a hard drive.

Copyrightable works include literary works, music, drama, visual art, computer software, and architectural designs. No registration is required for protection to exist, though registration provides legal advantages (more on that below).

Copyright vs. Patent vs. Trademark

These three forms of IP are often confused. Here's how they differ:

Copyright protects the expression of an idea (the specific code you wrote), not the idea itself (the concept of a sorting algorithm)
Patents protect the underlying invention (a new compression method), and require formal registration
Trademarks protect brand identity (a logo or product name), and also benefit from registration

A key distinction: copyright protection is automatic upon creation. Patents and trademarks require you to apply through a government agency.

Copyright Ownership and Rights

The creator of an original work is typically the initial copyright owner, with two major exceptions:

Work made for hire: If you create something as part of your job duties, your employer usually owns the copyright
Written transfer: The creator can assign or transfer rights through a written agreement

Copyright owners hold five exclusive rights: reproduction, distribution, public performance, public display, and creation of derivative works. These rights can be licensed (permission granted under specific conditions) or assigned (ownership transferred entirely).

Copyright Duration and Expiration

Individual authors: Life of the author plus 70 years
Works made for hire, anonymous, or pseudonymous works: 95 years from publication or 120 years from creation, whichever is shorter

Once the term expires, the work enters the public domain and anyone can use it freely.

Public Domain Works

Public domain works are not protected by copyright. A work can enter the public domain because its copyright expired, or because the creator explicitly dedicated it to the public domain.

Anyone can use, reproduce, and adapt public domain works without permission or payment. Examples include the works of William Shakespeare, the music of Johann Sebastian Bach, and the novels of Jane Austen. In the digital context, many early internet protocols and standards documents are also in the public domain.

Copyright in the Digital Age

Digital technology makes it trivially easy to copy, distribute, and modify content. That reality creates unique challenges for copyright protection and enforcement, and it's where network security and forensics professionals most often intersect with copyright law.

Patents for inventions, Thomas Edison - Wikipedia

Digital Rights Management (DRM)

DRM refers to technologies designed to control access to and use of digital content like music, movies, e-books, and software.

DRM systems aim to prevent unauthorized copying, distribution, and modification
Common DRM techniques include encryption, digital watermarking, and access control measures
Examples: Adobe Digital Editions for e-books, Apple's FairPlay for iTunes content, Denuvo for video games
Under the DMCA, circumventing DRM is itself illegal, even if the underlying use might otherwise qualify as fair use. This is a controversial area of law.

Copyright Issues with Software

Software is protected by copyright as a literary work. This means the creator holds exclusive rights to reproduce, distribute, and create derivative works from the code.

Copyright covers the source code, object code, and user interface design
Copyright does not protect the underlying ideas, algorithms, or functionality (those may be patentable instead)
Software licensing agreements (EULAs, terms of service) define what users can and can't do with the software

Open Source vs. Proprietary Software

Open source software is distributed with its source code available. Users can freely use, modify, and redistribute it under the terms of its license. Examples: Linux, Apache HTTP Server, Firefox.
Proprietary software is distributed without source code. Users are restricted from modifying or redistributing it. Examples: Microsoft Windows, Adobe Photoshop.

Both types are still copyrighted. The difference is in how permissive the license is, not whether copyright exists.

Creative Commons Licenses

Creative Commons (CC) licenses are standardized copyright licenses that let creators grant specific permissions for use and distribution of their works. They're widely used for online content.

CC licenses are built from four conditions that can be combined:

BY (Attribution): You must credit the creator
NC (NonCommercial): Only non-commercial use is allowed
ND (NoDerivatives): No modifications allowed
SA (ShareAlike): Derivative works must use the same license

The most permissive is CC0 (public domain dedication). The most restrictive is CC BY-NC-ND. Wikipedia articles use CC BY-SA, and many Flickr photos use various CC licenses.

Copyleft is a licensing strategy that requires any derivative work to be distributed under the same license terms as the original. This ensures that freedoms granted by the original license carry forward.

The GNU General Public License (GPL) is the most well-known copyleft license
If you modify GPL-licensed code and distribute it, your modified version must also be GPL-licensed
Examples: the Linux kernel (GPL), WordPress (GPL)
Copyleft is sometimes called "viral" licensing because the license terms propagate to all derivatives

Copyright Infringement

Copyright infringement occurs when someone uses a copyrighted work without permission, violating the owner's exclusive rights. For security and forensics professionals, recognizing infringement matters both for protecting your organization's content and for avoiding liability.

Definition of Infringement

Copyright infringement is the unauthorized reproduction, distribution, performance, display, or adaptation of a copyrighted work. Infringement can be:

Direct: Copying or distributing the work yourself
Contributory: Knowingly helping someone else infringe (e.g., providing tools specifically designed for piracy)
Vicarious: Profiting from infringement you have the ability to control

Examples: uploading copyrighted music to a file-sharing site, using copyrighted images on a website without a license, or distributing cracked software.

Fair Use Doctrine and Limitations

Fair use is a legal defense that permits limited use of copyrighted material without permission for purposes like criticism, commentary, news reporting, teaching, scholarship, or research.

Courts evaluate fair use using four factors:

Purpose and character of the use: Is it commercial or educational? Is it transformative (adding new meaning or purpose)?
Nature of the copyrighted work: Factual works get less protection than creative works
Amount used: How much of the original was taken, and was it the "heart" of the work?
Market effect: Does the use harm the market for the original?

No single factor is decisive. Courts weigh all four together. Examples of likely fair use: quoting a short passage in a book review, using a clip in a video essay for commentary purposes.

Plagiarism vs. Copyright Infringement

These two concepts overlap but are distinct:

Plagiarism is presenting someone else's work as your own without attribution. It's an ethical violation with academic or professional consequences (failing a course, losing a job).
Copyright infringement is unauthorized use of copyrighted material. It's a legal violation with civil or criminal penalties.

You can plagiarize without infringing copyright (e.g., copying from a public domain work without attribution). You can also infringe copyright without plagiarizing (e.g., crediting the author but distributing their work without permission).

Digital piracy is the unauthorized reproduction and distribution of copyrighted digital content. It's one of the most common forms of copyright infringement online.

Peer-to-peer (P2P) networks like BitTorrent enable decentralized file sharing, making piracy harder to stop
Piracy extends beyond entertainment to include software, textbooks, and proprietary datasets
Historical examples: Napster (shut down in 2001), The Pirate Bay, various torrent indexing sites
Forensics professionals may be called on to trace the distribution of pirated content or analyze network traffic for evidence of unauthorized file sharing

Consequences of Infringement

Civil penalties: Injunctions (court orders to stop), monetary damages, and attorney's fees. Statutory damages range from $750$ to $30{,}000$ per infringed work, and up to $150{,}000$ per work for willful infringement.
Criminal penalties: Fines and imprisonment for large-scale or commercial infringement
Other consequences: Reputational damage, job loss, academic sanctions, and loss of internet service under repeat-infringer policies

High-profile cases include A&M Records v. Napster and the Google Books litigation.

Patents for inventions, Lewis Howard Latimer - Wikipedia

Enforcing Copyrights

Copyright owners have several tools for detecting and stopping infringement. Security and forensics professionals often play a direct role in this process.

Registering Copyrights

Copyright protection is automatic, but registration with the U.S. Copyright Office provides important legal advantages:

A registered copyright is presumed valid in court
Registration is required before filing a lawsuit (for U.S. works)
Timely registration entitles the owner to statutory damages and attorney's fees, which are unavailable for unregistered works

Registration is especially important for high-value content (feature films, commercial software) or works likely to be infringed (photographs, digital art).

Detecting Copyright Violations

Web crawlers that scan websites for unauthorized copies
Image recognition software (e.g., Google Reverse Image Search, TinEye)
Digital watermarking embedded in content to trace its origin
Audio/video fingerprinting (e.g., YouTube's Content ID system)
Plagiarism detection software (e.g., Turnitin) for text-based content

Monitoring social media platforms, file-sharing networks, and online marketplaces is a routine part of copyright enforcement.

DMCA Takedown Notices

The Digital Millennium Copyright Act (DMCA) provides a streamlined process for removing infringing content from online platforms.

The takedown process works in steps:

The copyright owner identifies infringing content on a platform
The owner sends a formal takedown notice to the platform's designated agent, including identification of the copyrighted work and the infringing material
The platform removes or disables access to the content
The uploader can file a counter-notice if they believe the takedown was improper
If no lawsuit is filed within 10-14 business days, the platform may restore the content

Platforms like YouTube, Facebook, and GitHub all have DMCA compliance processes. The DMCA also provides safe harbor protection for platforms that promptly respond to valid takedown notices.

Copyright Lawsuits and Penalties

When takedown notices aren't sufficient, copyright owners can file lawsuits. Remedies include:

Injunctions to stop ongoing infringement
Actual damages (proven financial losses) or statutory damages ( $750$ to $150{,}000$ per work)
Impoundment of infringing copies
Attorney's fees for registered works

Notable cases: A&M Records v. Napster (2001) established that facilitating mass infringement creates liability. The Google Books case addressed whether digitizing books for search purposes constitutes fair use.

International Copyright Treaties

Copyright enforcement doesn't stop at national borders. Several international treaties create a framework for cross-border protection:

Berne Convention (1886, updated): Establishes that copyright is automatic (no registration required) and that member countries must give foreign works the same protection as domestic works. Over 180 countries are members.
TRIPS Agreement (1994): Administered by the WTO, sets minimum IP protection standards that member countries must meet.
WIPO Copyright Treaty (1996): Addresses digital-era issues like DRM protection and online distribution rights.

Enforcement remains uneven across jurisdictions. Countries with weaker IP enforcement are often hubs for piracy, which creates challenges for forensics professionals working on international cases.

Ethical Considerations

Copyright law tries to balance two competing interests: rewarding creators so they keep creating, and ensuring the public can access knowledge and culture. That tension runs through every ethical question in this space.

Balancing Creator Rights vs. Public Access

Stronger copyright protection gives creators more control and financial incentive. But overly broad protection can lock up knowledge and limit what others can build on.

Key debates include:

Whether copyright terms (life + 70 years) are too long, effectively keeping works out of the public domain for over a century
Whether fair use exceptions are broad enough for education and research
Whether DRM restrictions go too far by preventing legitimate uses

Impact on Innovation and Creativity

Overly restrictive copyright can prevent the creation of derivative works, remixes, and adaptations that build on existing culture
Technologies like P2P file sharing were developed for legitimate purposes but became associated with piracy, leading to legal battles that shaped how technology develops
Fan fiction, remix culture, and open-source software all exist in tension with traditional copyright frameworks

Orphan Works and Copyright

Orphan works are copyrighted works whose owners can't be identified or located. This creates a practical problem: you can't get permission from someone you can't find.

Libraries, archives, and researchers often can't digitize or share orphan works because of infringement risk
Old photographs, films, and out-of-print books frequently fall into this category
Several countries have proposed orphan works legislation, but comprehensive solutions remain elusive

Copyrights in Academic Research

Researchers often need to use copyrighted images, datasets, or excerpts from other publications
Journal publishers typically require authors to transfer copyright as a condition of publication, which can limit how researchers share their own work
The open access movement pushes for research (especially publicly funded research) to be freely available, challenging traditional publishing models
Proper licensing and fair use analysis are essential skills for anyone working in academic settings

Ethical Use of Copyrighted Materials

Using copyrighted materials ethically means respecting creators' rights even when enforcement is unlikely. In practice, this involves:

Obtaining proper licenses before using copyrighted content commercially
Providing attribution even when not legally required
Applying fair use thoughtfully, not as a blanket excuse for any non-commercial use
Respecting license terms for open-source and Creative Commons content

For network security and forensics professionals, ethical handling of copyrighted materials also means properly managing digital evidence that contains copyrighted content, and understanding when your investigative activities might implicate copyright law.

🔒Network Security and Forensics Unit 9 Review