Criminal offence of attacking the information system in theory and practice

Kibernetski kriminal je zaradi hitrega razvoja tehnologije eden najhitreje razvijajočih se kriminalov, saj z razvojem novih tehnologije nastajajo tudi nove oblike. Enotna definicija kibernetskega kriminala ne obstaja, zato jo je treba iskati s kombiniranjem različnih definiranj različnih avtorjev in pravnih virov. Kibernetski kriminal ne pozna teritorialnih omejitev zato je za njegov pregon potrebno mednarodno sodelovanje in tudi mednarodno usklajena pravna ureditev. Mednarodni pravni okvir predstavlja Konvencija o kibernetski kriminaliteti, ki jo je leta 2001 sprejel Svet Evrope in jo je do avgusta 2018 ratificiralo 61 držav med katerimi so tudi države, ki niso članice Sveta Evrope. Konvencija nalaga državam podpisnicam, da v svoji zakonodaji inkriminirajo kazniva dejanja, ki se lahko razdelijo v štiri skupine. Slovenija je Konvencijo o kibernetski kriminaliteti podpisala 24. junija 2002, ratificirala pa 20. maja 2004. Zahteva po inkriminaciji kaznivega dejanja napada na informacijski sistem tako izhaja iz členov od 1 do 6 Konvencije, ki inkriminirajo protipravni dostop, protipravno prestrezanje, motenje podatkov, motenje sistemov in zlorabo naprav. Na ravni Evropske Unije je pomembna Direktiva 2013/40/EU, ki je nadgradnja Konvencije o kibernetski kriminaliteti. Cilj direktive je približevanje in izboljšanje sodelovanja med državami članicami na področju pregona kibernetskega kriminala. Prav tako kot Konvencija o kibernetski kriminaliteti tudi Direktiva 2013/40/EU opredeljuje posamezna kazniva dejanja. Zakonodajo so morale države članice z Direktivo 2013/40/EU uskladiti do 4. Septembra 2015 in o uskladitvah obvestiti Evropsko komisijo. Kaznivo dejanje napad na informacijski sistem je urejeno v zdajšnjem 221. členu KZ-1 in je bilo do sprejetja novele KZ-1B (Uradni list RS, št. 91/11) predmet večkratnih sprememb. Za razumevanje kaznivega dejanja napada na informacijski sistem je potrebno razumevanje pojmov informacijski sistem, podatki, neupravičen vstop v informacijski sistem, vdor v informacijski sistem in neupravičeno prestrezanje podatkov.Because of the rapid development of technology, cybercrime is one of the fastest growing crime, as new technologies develop new forms. There is no uniform definition of cybercrime, so it should be sought by combining different definitions of different authors and legal resources. There are no cybercrime territorial restrictions, so it is necessary to prosecute it by international cooperation as well as by internationally harmonized regulation. The Convention on Cybercrime (ETS No.185) is the international legal framework, adopted in 2001 by the Council of Europe and it was ratified by 61 countries until August 2018, including non-member states. The Convention requires States Parties to criminalize criminal penalties, divided into four groups, in their legislation. Slovenia signed the Convention on Cybercrime on 24 June 2002 and ratified it on 20 May 2004. The request for the criminalization of a criminal offense the attack on the information system follows the Conventions Articles 1 to 6, which criminalize the unlawful access, unlawful closure, data interference, system malfunction and device misuse. Directive 2013/40/EU (L 2018/8), which is an upgrade of the Convention on the European Union, is important at European Union level cybercrime. The aim of the directive is to bring together and improve cooperation between countries members in the field of law enforcement of cybercrime. Just like the Convention on Cyberspace criminality, Directive 2013/40/EU defines individual offenses. Member States had to coordinate their legislation with Directive 2013/40 / EU by 4 September 2015 and inform the European Commission of the alignments. The offense of attacking the information system is regulated in the current Article 221. KZ-1 and was until the adoption of the amendment to the KZ-1B (Uradni list RS, št. 91/11) the subject of several changes. To understand the criminal act of the information system attacks it is important to understand the concepts of information system, data, unwarranted information system entry, information system intrusion and unjustified data interception