Computer Security - Malicious Software

Malware

Malware is an abbreviation of Malicious Software - software designed specifically to damage or disrupt a system (Webopedia 2004). Malware consists of a variety of forms depending on how it is executed, how it is spread, and what it actually does. The most common forms include:

Viruses. The FICORA (2004) suggests that a virus is a program that is spread to other files within a system. Viruses weaken availability, integrity, and confidentiality of data – essentially they destroy, change, or alter. Viruses slow or hamper other operations of an infected system, and [Spreading the Computer Virus] can commonly occur via communications networks.

A Trojan Horse. A Trojan Horse is a harmful piece of software that is disguised as being legitimate. It can be purposely attached to otherwise useful software, or can be spread by giving the impression that it is useful. Some Trojan horses can spread or activate other forms of Malware.

Worms. Worms are programs that reproduce automatically and can independently make use of a host’s computer files. Worms can also spread viruses.

Hoaxes. FICORA (2004) suggests that a hoax is a false alert of spreading viruses. Hoaxes are based on the assumption that information contained in a message is of such a kind that the recipient will almost certainly forward it. This can block the systems because so many users are sending e-mails at the same time thus loading the network resources.

Spyware. Spyware is a program that explores the files within an information system. It collects and sends information regarding users details, and can be used for investigation or preparation of an attack.

Backdoor. Wikipedia (2004) suggests that a Backdoor is a piece of software that allows access to the computer system bypassing all normal authentication procedures. They are divided into two groups and are either manually inserted into another piece of software and are spread by their host software being installed; or they can be executed as part of the boot process and are spread by worms carrying them.

Exploit. An Exploit is software that attacks a particular vulnerability. Not necessarily malicious in intent, they are often devised by security as a way of demonstrating that a vulnerability exists – however are used as a component of malicious programs such as worms (Wikipedia 2004).

Rootkit. Wikipedia (2004) suggests that a Rootkit is software that is inserted into a computer system after an attacker has gained control of the system. Rootkits often include functions to hide the traces of the attack, and may also include backdoors, allowing the attacker to easily regain access later; or exploit software to attack other systems.

Anti-Virus Software is becoming increasingly effective in detering and extraditing Malware of all kinds. As Anti-Virus Software evolves however, Malware does also.

List of References

Malicious software – general. 2004. Finnish Communications Regulatory Authority (FICORA) Web site: http://www.ficora.fi/englanti/tietoturva/haittaohj.htm (accessed October 27, 2004).

Malware. 2004. Webopedia Web site: http://www.webopedia.com/TERM/M/malware.html (accessed October 28, 2004).

Malware. 2004. Wikipedia Web site: http://en.wikipedia.org/wiki/Malware (accessed October 27, 2004).

Melissa Patch 23:31, 28 Oct 2004 (EST)