Exam 10: Malicious Software

A ________ lies dormant until a predefined condition is met; the program then triggers an unauthorized act

The earliest significant worm infection was released onto the Internet by _________ in 1988.

Many forms of infection can be blocked by denying normal users the right to modify programs on the system.

Viruses often morph to evade detection.

A _________ is a computer program that appears to have a useful function, but also has a hidden and potentially malicious function that evades security mechanisms.

_________ is software that collects information from a computer and transmits it to another system

A backdoor is any mechanism that bypasses a normal security check.

A _________ is a set of programs installed on a system to maintain covert access to that system with administrator privileges, while hiding evidence of its presence to the greatest extent possible.

The first function in the propagation phase for a network worm is for it to search for other systems to infect, a process known as scanning or __________.

A __________ virus is a virus that mutates with every infection, making detection by the "signature" of the virus impossible

To replicate itself, a worm uses some means to access remote systems.

A _________ , also known as a trapdoor, is a secret entry point into a program that allows someone who is aware of the door to gain access without going through the usual security access procedures.

As an alternative to just destroying data, some malware encrypts the user's data and demands payment in order to access the key needed to recover this information.This is sometimes known as _________

__________ is software (macro, or other portable instruction) that can be shipped unchanged to a heterogeneous collection of platforms and execute with identical semantics

__________ capture keystrokes on a compromised system.

Unsolicited bulk e-mail, commonly known as ________, imposes significant costs on both the network infrastructure needed to relay this traffic and on users who need to filter their legitimate e-mails out of this flood.

In a ________ attack the attacker is able to implant zombie software on a number of sites distributed throughout the Internet

A _________ attack is an attack on a computer system or network that causes a loss of service to users

A _________ is a computer program that can run independently and can propagate a complete working version of itself onto other hosts on a network.

A virus, although attached to an executable program, cannot do anything that the program is permitted to do.