November 10, 2006 11:39 AM PST

U.K. outlaws denial-of-service attacks

A U.K. law has been passed that makes it an offense to launch denial-of-service attacks, which experts had previously called "a legal gray area."

Among the provisions of the Police and Justice Bill 2006, which gained Royal Assent on Wednesday, is a clause that makes it an offense to impair the operation of any computer system. Other clauses prohibit preventing or hindering access to a program or data held on a computer, or impairing the operation of any program or data held on a computer.

The maximum penalty for such cybercrimes has also been increased from 5 years to 10 years.

The law that attempted previously to deal with this area of computer crime was the Computer Misuse Act 1990 (CMA), which was drafted before widespread use of the Internet began.

In a denial-of-service attack, a person attempts to make a computer system unavailable to users by overloading it with data. The CMA only prohibited unauthorized modification of a system, which opened up legal ambiguity for denial of service attacks using e-mail.

In November 2005, David Lennon was tried for sending 5 million e-mails to his former employer, causing the e-mail server to crash. His defense successfully argued that as an e-mail server exists to receive e-mail, sending e-mail to that server could not be an unauthorized modification, no matter how much mail was sent.

District Judge Kenneth Grant agreed, and concluded that sending e-mail was an authorized modification of the server, so Lennon had no case to answer. Grant's ruling was later overturned, with Lennon sentenced to two months' curfew with an electronic tag. By that time, amendments to the CMA had been included in the Police and Justice Bill.

Tom Espiner of ZDNet UK reported from London.

See more CNET content tagged:
denial of service, modification, e-mail server, law, U.K.


Join the conversation!
Add your comment
lets start sueing software companies.
I've had loads of problems with software imparing my computers operations over the years.
Now i can sue.
Posted by wildchild_plasma_gyro (296 comments )
Reply Link Flag
Yes, but you knowingly and willingly installed Windows, so you can't sue Microsoft when it messes your system up.
Posted by perfectblue97 (326 comments )
Link Flag
Now Starforce should be withdrawn from Great Britain as it is known to alter system in a very user-unfriendly manner...
Posted by Klimax (5 comments )
Reply Link Flag

Join the conversation

Add your comment

The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use.

What's Hot



RSS Feeds

Add headlines from CNET News to your homepage or feedreader.