2.1 Computer Viruses
113
Some filter programs do not “catch” suspicious actions, but check the programs
called by viruses for execution. This causes a computer to slow down.
However, the advantages of using filter software are significant: they allow you
to detect many viruses at a very early stage, when the virus has not yet had time to
propagate itself and spoil anything. Thus, it is possible to minimize losses from a
virus.
Vaccine programs, or immunizers, modify programs and disks in such a way that
it does not affect the operation of programs, but the virus from which vaccination is
performed considers these programs or disks to be already infected. These programs
are extremely ineffective.
No single type of antivirus software alone provides complete protection against
viruses. The best strategy for protection against viruses is a multi-level, “layered”
defense. We briefly describe the structure of this defense.
Keylogger (this is a keystroke logger) is software, the main purpose of which
is to monitor keystrokes hidden and to keep a log of these keystrokes or hardware.
Hardware keyloggers are much less common than software, but in order to protect
important information in no case should we forget about them.
As you know, keystroke interception can be used by ordinary programs and therefore is often used to call various basic program functions from another application
using so-called hotkeys or, for example, to switch the wrong keyboard layout (like
Keyboard Ninja).
There are many variations of the so-called legal software, which is used by experienced administrators to monitor what an employee is doing during the day, or to
monitor the activity of unauthorized people on the computer of a user. However,
where does this invisible line go between the “legitimate” use of “legal” software
and its “illegal” use for criminal purposes? After all, it is well known that the same
“legal” software is often used for the purpose of deliberately stealing user’s sensitive
data, such as passwords.
In a number of countries, most keyloggers are considered “legal” and are sold
freely, because developers declare many reasons for using keyloggers, for example:
• For parents: Tracking children’s activities on the Internet and notifying parents in
the event of attempts to get access to the websites “for adults” (parental control);
• For security services of the organization: Tracking the facts of improper use of
personal computers, their use during off-hours;
• For security services of the organization: Tracking the facts of typing on a
keyboard of critical words and phrases that constitute a commercial secret of
the organization and disclosure of which may lead to material or other damage to
the organization;
• For various security services: Analysis and investigation of incidents involving
the use of personal computers;
• For other reasons.
Unlike other types of malicious software, for an electronic system the keylogger
seems to be absolutely safe. However, in real situations it can be extremely dangerous
for the user: because with the help of a keylogger, it is relatively easy to intercept
113
Some filter programs do not “catch” suspicious actions, but check the programs
called by viruses for execution. This causes a computer to slow down.
However, the advantages of using filter software are significant: they allow you
to detect many viruses at a very early stage, when the virus has not yet had time to
propagate itself and spoil anything. Thus, it is possible to minimize losses from a
virus.
Vaccine programs, or immunizers, modify programs and disks in such a way that
it does not affect the operation of programs, but the virus from which vaccination is
performed considers these programs or disks to be already infected. These programs
are extremely ineffective.
No single type of antivirus software alone provides complete protection against
viruses. The best strategy for protection against viruses is a multi-level, “layered”
defense. We briefly describe the structure of this defense.
Keylogger (this is a keystroke logger) is software, the main purpose of which
is to monitor keystrokes hidden and to keep a log of these keystrokes or hardware.
Hardware keyloggers are much less common than software, but in order to protect
important information in no case should we forget about them.
As you know, keystroke interception can be used by ordinary programs and therefore is often used to call various basic program functions from another application
using so-called hotkeys or, for example, to switch the wrong keyboard layout (like
Keyboard Ninja).
There are many variations of the so-called legal software, which is used by experienced administrators to monitor what an employee is doing during the day, or to
monitor the activity of unauthorized people on the computer of a user. However,
where does this invisible line go between the “legitimate” use of “legal” software
and its “illegal” use for criminal purposes? After all, it is well known that the same
“legal” software is often used for the purpose of deliberately stealing user’s sensitive
data, such as passwords.
In a number of countries, most keyloggers are considered “legal” and are sold
freely, because developers declare many reasons for using keyloggers, for example:
• For parents: Tracking children’s activities on the Internet and notifying parents in
the event of attempts to get access to the websites “for adults” (parental control);
• For security services of the organization: Tracking the facts of improper use of
personal computers, their use during off-hours;
• For security services of the organization: Tracking the facts of typing on a
keyboard of critical words and phrases that constitute a commercial secret of
the organization and disclosure of which may lead to material or other damage to
the organization;
• For various security services: Analysis and investigation of incidents involving
the use of personal computers;
• For other reasons.
Unlike other types of malicious software, for an electronic system the keylogger
seems to be absolutely safe. However, in real situations it can be extremely dangerous
for the user: because with the help of a keylogger, it is relatively easy to intercept