2.2 Implants: Types, Ways of Injection, and Methods of Protection
121
Malware is a software program designed to provide unauthorized access to and
(or) influence on personal data or resources of the information system of personal
data.
So, program implants are hidden (undocumented) possibilities in software and
hardware of personal computers and peripheral equipment providing unauthorized
access to system resources (as a rule, via a local or global network). Therefore,
the main purpose of implants is to provide unauthorized access to confidential
information.
Wikipedia (Russian) provides the following definition of a software backdoor:
Backdoor is a defect of an algorithm, which is deliberately embedded into this
algorithm by the developer and provides unauthorized access to data or remote control
of the operating system and computer in general.
The main goal of any backdoor is to gain access to data (in most cases—to
encrypted and protected data) as quickly and secretly as possible. For example, a
backdoor can be embedded into an encryption algorithm for further tapping of a
protected channel by the intruder.
Main features of a backdoor:
– It is extremely difficult to find;
– It can be used multiple times;
– It looks as a programmer’s mistake; in case it is detected, the developer can claim
that this mistake was made accidentally, without malicious intent;
– Can be used only if the secret is known: only those who know how to activate
backdoor can use it;
– Protected from comprometation by previous uses: even if a backdoor is detected,
it is impossible to determine who used it or what information was received by the
intruder;
– Difficult to replicate: even if a backdoor is found by anyone, it cannot be used in
another code or device.
Popular principles of creating backdoors in algorithms:
– Low resistance of the algorithm to cryptoanalysis;
– Specially selected constants: The algorithm can lose resistance to cryptoanalysis
when certain values of constants used in its operation are selected;
– Difficulty with safe implementation: This means that safe implementation of the
algorithm is too slow, and that everybody is going to use the unsafe option, which
is beneficial for the intruder.
2.2.2 Dangers of Implants
The main danger of software implants consists in the fact that an implant, being a
part of a protected system, can actively take measures to mask its presence in the
system. When an implant is injected into a protected system, a hidden channel of
121
Malware is a software program designed to provide unauthorized access to and
(or) influence on personal data or resources of the information system of personal
data.
So, program implants are hidden (undocumented) possibilities in software and
hardware of personal computers and peripheral equipment providing unauthorized
access to system resources (as a rule, via a local or global network). Therefore,
the main purpose of implants is to provide unauthorized access to confidential
information.
Wikipedia (Russian) provides the following definition of a software backdoor:
Backdoor is a defect of an algorithm, which is deliberately embedded into this
algorithm by the developer and provides unauthorized access to data or remote control
of the operating system and computer in general.
The main goal of any backdoor is to gain access to data (in most cases—to
encrypted and protected data) as quickly and secretly as possible. For example, a
backdoor can be embedded into an encryption algorithm for further tapping of a
protected channel by the intruder.
Main features of a backdoor:
– It is extremely difficult to find;
– It can be used multiple times;
– It looks as a programmer’s mistake; in case it is detected, the developer can claim
that this mistake was made accidentally, without malicious intent;
– Can be used only if the secret is known: only those who know how to activate
backdoor can use it;
– Protected from comprometation by previous uses: even if a backdoor is detected,
it is impossible to determine who used it or what information was received by the
intruder;
– Difficult to replicate: even if a backdoor is found by anyone, it cannot be used in
another code or device.
Popular principles of creating backdoors in algorithms:
– Low resistance of the algorithm to cryptoanalysis;
– Specially selected constants: The algorithm can lose resistance to cryptoanalysis
when certain values of constants used in its operation are selected;
– Difficulty with safe implementation: This means that safe implementation of the
algorithm is too slow, and that everybody is going to use the unsafe option, which
is beneficial for the intruder.
2.2.2 Dangers of Implants
The main danger of software implants consists in the fact that an implant, being a
part of a protected system, can actively take measures to mask its presence in the
system. When an implant is injected into a protected system, a hidden channel of