146
2 Computer Viruses, Malicious Logic, and Spyware
Another direction of introduction is using the information exchange systems. Two
methods exist here: front door coupling and back door coupling.
Front door coupling can be direct or indirect.
Direct coupling consists in repeated broadcast of a virus signal or an implant
during the period when the competitor’s receiver is receiving useful information. It
can be expected that the software mixed with the main information will enter the
system at some point. The disadvantage of this method is the necessity to know the
applied encryption algorithms and keys during transmission in the closed information
channel.
Due to the last circumstance, the use of indirect coupling is more preferable.
Penetration into the information system in this case takes place in the point with the
weakest protection, from which the virus or software implant can reach the designated
node. Due to wide implementation of global networks, such points can always be
found.
Back door coupling includes an entire range of means: from affecting the system
via the elements that do not directly serve the main purpose of the system (e.g., power
lines) to deliberate transmission of infected equipment or software to a competitor.
The use of the methods of power (high frequency) replay also looks like a
promising field of introduction of software implants or viruses.
Development of the corresponding means is performed by an entire range
of companies, including Defense Advanced Research Projects Agency (CXA),
Toshiba (Japan), etc. It is expected that in 5 years it will be possible to introduce
software products using this very method.
In the simplified form, the process of HF replay of implants and viruses looks
approximately as follows. Powerful high-frequency radiation modulated by the information signal irradiates an object of electronic computing equipment. Corresponding
voltages and currents are found in the computer circuits or communication line, which
are detected on semiconductor elements of the computing device circuit in a certain
manner. As a result, the virus or the implant is introduced to the computer.
After that, following the pre-planned program, they perform collection and
primary processing of data and transfer it to the given address via the network and
then destroy or modify certain information.
The most problematic aspect of this introduction method is the selection of power,
frequency, modulation form, and other parameters of the probe signal in each specific
case.
2.3.3 Scenarios of Introduction of Software Implants During
Different Stages of Software Lifecycle
Implants have a wide range of effects on the data processed by information system.
Therefore, when controlling process security of software, it is necessary to consider
its purpose and composition of firmware medium of the information system.
2 Computer Viruses, Malicious Logic, and Spyware
Another direction of introduction is using the information exchange systems. Two
methods exist here: front door coupling and back door coupling.
Front door coupling can be direct or indirect.
Direct coupling consists in repeated broadcast of a virus signal or an implant
during the period when the competitor’s receiver is receiving useful information. It
can be expected that the software mixed with the main information will enter the
system at some point. The disadvantage of this method is the necessity to know the
applied encryption algorithms and keys during transmission in the closed information
channel.
Due to the last circumstance, the use of indirect coupling is more preferable.
Penetration into the information system in this case takes place in the point with the
weakest protection, from which the virus or software implant can reach the designated
node. Due to wide implementation of global networks, such points can always be
found.
Back door coupling includes an entire range of means: from affecting the system
via the elements that do not directly serve the main purpose of the system (e.g., power
lines) to deliberate transmission of infected equipment or software to a competitor.
The use of the methods of power (high frequency) replay also looks like a
promising field of introduction of software implants or viruses.
Development of the corresponding means is performed by an entire range
of companies, including Defense Advanced Research Projects Agency (CXA),
Toshiba (Japan), etc. It is expected that in 5 years it will be possible to introduce
software products using this very method.
In the simplified form, the process of HF replay of implants and viruses looks
approximately as follows. Powerful high-frequency radiation modulated by the information signal irradiates an object of electronic computing equipment. Corresponding
voltages and currents are found in the computer circuits or communication line, which
are detected on semiconductor elements of the computing device circuit in a certain
manner. As a result, the virus or the implant is introduced to the computer.
After that, following the pre-planned program, they perform collection and
primary processing of data and transfer it to the given address via the network and
then destroy or modify certain information.
The most problematic aspect of this introduction method is the selection of power,
frequency, modulation form, and other parameters of the probe signal in each specific
case.
2.3.3 Scenarios of Introduction of Software Implants During
Different Stages of Software Lifecycle
Implants have a wide range of effects on the data processed by information system.
Therefore, when controlling process security of software, it is necessary to consider
its purpose and composition of firmware medium of the information system.