2.3 Models of Influence of Software Implants on Computers …
145
4. Compromising model
The implant either transmits the information set by the intruder (e.g., keyboard input)
to a communication channel or saves it without relying on the guaranteed possibility
of further receipt or extraction. More exotic is the case where the implant initiates
constant access to information, which increases the noise-to-signal ratio during the
interception of spurious emissions.
5. Distortion or error initiation model
The implant distorts the data streams arising during the work of the application
programs (output streams), distorts the input data streams, or initiates (or suppresses)
the errors emerging during operation of the application programs.
6. Scavenging model
In this case, the destructive malware can have no direct effect: the residual data is
examined. If such software implant is used, an operating mode is imposed, which
helps maximize the number of residual fragments of valuable information. The
intruder either receives these fragments using implant models 2 and 3 or directly
accesses the computer under the guise of repair or preventive maintenance.
2.3.2 Methods of Implementation of Software Implants
and Computer Viruses
Creation of an implant or a virus doesn’t yet solve the task set during malware
writing. The second task, which is just as difficult, consists in introduction of the
software product. The importance and complexity of this last task is indicated by the
fact that its solution within the framework of information warfare is sought even by
governmental agencies of a number of countries. This state-level approach leaves no
doubt that the latest implanting achievements will soon become available to industrial
espionage.
As of now, it is possible to single out three main groups of ways of implementation
of program implants and computer viruses:
• During the stage of hardware and software creation;
• Through information exchange systems;
• By power or high-frequency replays.
The simplest solution is to introduce the virus at the stage of creation of computer
system elements. It is no secret that modern software product contains up to half a
million lines; no one knows them better than their authors and is able to check them
effectively. Due to this fact, software creators are potential objects for certain services
and companies. However, experts consider infection (modification) of AI systems
helping create this software to be more promising than recruiting programmers.
145
4. Compromising model
The implant either transmits the information set by the intruder (e.g., keyboard input)
to a communication channel or saves it without relying on the guaranteed possibility
of further receipt or extraction. More exotic is the case where the implant initiates
constant access to information, which increases the noise-to-signal ratio during the
interception of spurious emissions.
5. Distortion or error initiation model
The implant distorts the data streams arising during the work of the application
programs (output streams), distorts the input data streams, or initiates (or suppresses)
the errors emerging during operation of the application programs.
6. Scavenging model
In this case, the destructive malware can have no direct effect: the residual data is
examined. If such software implant is used, an operating mode is imposed, which
helps maximize the number of residual fragments of valuable information. The
intruder either receives these fragments using implant models 2 and 3 or directly
accesses the computer under the guise of repair or preventive maintenance.
2.3.2 Methods of Implementation of Software Implants
and Computer Viruses
Creation of an implant or a virus doesn’t yet solve the task set during malware
writing. The second task, which is just as difficult, consists in introduction of the
software product. The importance and complexity of this last task is indicated by the
fact that its solution within the framework of information warfare is sought even by
governmental agencies of a number of countries. This state-level approach leaves no
doubt that the latest implanting achievements will soon become available to industrial
espionage.
As of now, it is possible to single out three main groups of ways of implementation
of program implants and computer viruses:
• During the stage of hardware and software creation;
• Through information exchange systems;
• By power or high-frequency replays.
The simplest solution is to introduce the virus at the stage of creation of computer
system elements. It is no secret that modern software product contains up to half a
million lines; no one knows them better than their authors and is able to check them
effectively. Due to this fact, software creators are potential objects for certain services
and companies. However, experts consider infection (modification) of AI systems
helping create this software to be more promising than recruiting programmers.