1.6 Typical Examples of Viruses and Trojans . . . . . . . . . . . . . . . . . 60
1.6.1 NetBus Virus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
1.6.2 Trojan Programs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
1.6.3 Ways to Detect Trojans . . . . . . . . . . . . . . . . . . . . . . . . 68
1.6.4 Neutralizers of Tests and Code Analysis Software . . . . . 71
1.7 Cybersecurity of Power Facilities: Past, Present, and Future . . . . 74
1.7.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
1.7.2 Basic Principles of Assurance Cybersecurity
of Power Facilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
1.7.3 Major Cyberthreats for Facilities of Fuel and Energy
Industry and Ways of Their Elimination . . . . . . . . . . . . 83
1.7.4 Assurance of Cybersecurity of Power Facilities
of the USA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
1.8 Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
References . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
2 Computer Viruses, Malicious Logic, and Spyware . . . . . . . . . . . . . . 101
2.1 Computer Viruses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
2.1.1 Terms and Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 101
2.1.2 A Brief History of Computer Viruses . . . . . . . . . . . . . . 102
2.1.3 Classification of Computer Viruses . . . . . . . . . . . . . . . . 105
2.1.4 Specifics of Using the Stuxnet Virus as a Type
of Cyberweapon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
2.2 Implants: Types, Ways of Injection, and Methods
of Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
2.2.1 Introduction to the Problem of Software Implants . . . . . 120
2.2.2 Dangers of Implants . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
2.2.3 Classifications of Software Implants . . . . . . . . . . . . . . . 122
2.2.4 Implant Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
2.3 Models of Influence of Software Implants on Computers,
Introduction Methods, and Interaction with Intruders . . . . . . . . . 144
2.3.1 Models of Impact of Software Implants
on Computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
2.3.2 Methods of Implementation of Software Implants
and Computer Viruses . . . . . . . . . . . . . . . . . . . . . . . . . 145
2.3.3 Scenarios of Introduction of Software Implants
During Different Stages of Software Lifecycle . . . . . . . . 146
2.3.4 Methods of Interaction Between Software Implant
and Intruder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
2.4 Software Keyboard Spies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
2.4.1 Operating Principle of Keyloggers . . . . . . . . . . . . . . . . . 154
2.4.2 Keyboard Input Tracking Methods . . . . . . . . . . . . . . . . 155
xiv
Contents