Premium Essay

Adware

In:

Submitted By adeogun
Words 1378
Pages 6
Caleb Olumuyiwa
N/T 2580 Introduction To Information Security
Week 2 A ssigment
Define Key Terms.
Adware | A software program that collects infor- mation about Internet usage and uses it to present targeted advertisements to users.
Asset | Any item that has value to an organization or a person.
Attack | An attempt to exploit a vulnerability of a computer or network component
Backdoor | An undocumented and often unauthor- ized access method to a computer resource that bypasses normal access controls.
Black-hat hacker | A computer attacker who tries to break IT security for the challenge and to prove technical prowess.
Cookie | A text file sent from a Web site to a Web browser to store for later use. Cookies contain details gleaned from visits to a Web site
Cracker | A computer attacker who has hostile intent, possesses sophisticated skills, and may be interested in financial gain.
Dictionary attack | An attack method that takes all the words from a dictionary file and attempts to log on by entering each dictionary entry as a password.
Disclosure | 1. Any instance of an unauthorized user accessing protected information. 2. Refers, under HIPAA, to how a covered entity shares PHI with other organizations.
Ethical hacker | An information security or network professional who uses various penetration test tools to uncover or fix vulnerabilities. Also called a white-hat hacker.
Firewall | A program or dedicated hardware device that inspects network traffic passing through it and denies or permits that traffic based on a set of rules you determine at configuration.
Gray-hat hacker | A computer attacker with average abilities who may one day become a black-hat hacker. Gray-hat hackers are also called wannabes
Hacker | A computer expert who explores computing environments to gain knowledge.
Hijacking | A type of attack in which the attacker takes control of a

Similar Documents

Free Essay

Proposed Law Limiting Adware and Spyware

...Recommendation for Law Proposal: Limiting Adware and Spyware James S. Dunmire Management 520 Professor Michael Carr June 11, 2015 The Law that I am Proposing The law that I would propose for e-commerce is to severely restrict unsolicited adware. Adware that is often bundled on an e-commerce site gets downloaded on the consumer’s computer without their knowledge or consent. “Internet companies, whose apparent "business model" is the exploitation of consumer trust and ignorance, are sneaking their spyware systems into our machines for their own purposes”(GRC, n.d). This is not only extremely annoying to the user; it can compromise the user’s security and corrupt the software. This Adware can also contain or be classified as spyware, a type of malware that is considered by many to be privacy-invasive. Spyware can steal a user’s information or corrupt the user’s system files (pc tools, n..d.). Spyware is also difficult to remove once it has been downloaded onto the PC. Many users inadvertently download spyware or adware when downloading other programs. Many popular peer to peer applications and other software packages include adware or spyware packages. Even seemingly innocuous programs such as special cursors can contain spyware. In addition, many websites and advertising banners set cookies on the user’s system that track their web usage without their knowledge or consent (Secure Perdue, n.d.). Spyware is not an illegal type of software in any way. However...

Words: 645 - Pages: 3

Free Essay

Internet Security

...need it. You and your family are at risk of virtual attacks. A decade ago, the Internet was something only “techies” talked about. It was a new limitless source of information, with very few users. Today, the Internet has already become an essential part of our lives. It’s where we access our banking records, credit card statements, tax returns and other highly sensitive personal information. By the end of this decade, over 2 billion people will be connected to the Internet—that’s about half the world’s current population. But with all the good things the Internet offers us, it also opens the door to serious, potentially devastating threats. Unlike corporate and government computer systems, few personal computers have any safeguards beyond basic virus protection. That means anytime you’re online, you are a potential target for online criminals and hackers. And if you have high-speed Internet access, your computer is online most of the time, making Internet criminals and hackers a 24-hour-a-day, year-round threat to you, your personal information, and your family. Understanding how the Internet works and the security threats you face. When you access the Internet, your computer sends a message over the Web that uniquely identifies your computer and where it is located. This allows the information you’ve requested to be returned to you. Often, this requested information carries with it unwanted hidden software created by hackers and online criminals. This...

Words: 699 - Pages: 3

Premium Essay

Lab 4.2

...1. What is the one thing that a virus, a worm, spyware, and malicious code have in common? What are the differences among these four threats: a virus, a worm, spyware, and a malicious code? * Virus- attaches to or “infects” a host program * Worm-standalone program does not need a host * Spyware-covertly collects information * Malicious code-code that has undesired effects such as opening back doors or collecting information. 2. How often should you update your anti-virus protection? * Daily 3. Why is it a best practice to have and to carry an antivirus boot-up disc or CD? * Just in case your computer can’t start you can boot to the cd to try and remove what is causing the problem 4. What other anti-malicious software and anti-malicious code applications included with Avira under the Real-Time Shields application? What risk and threats do these help mitigate? * The following pretty much scan the appropriate files or application to see if there is any harmful files. File system shield, Mail Shield, Web Shield, P2P Shield, IM shield, Network Shield, Behavior shield. 5. In a corporate environment, should new AV definitions be installed as they are available? * Yes, because there are roughly 200 new viruses per day so the sooner it can be update the better off the network will be. 6. Is the quick scan good enough to maintain the system protected? * No, at least once a week you need to do a full scan...

Words: 396 - Pages: 2

Premium Essay

Ransomware: the Latest Craze

...1 Ransomware: The latest craze Well, not really. Ransomware has been around for over 10 years but has been gaining in popularity as the hackers’ latest way of extorting money from you. So, what is it? As the name implies, it’s malware (malicious software) which has kidnapped your computer and is holding it for ransom. It works like this. You click on an unsuspecting link from a web page, social networking site, email message or (lately) Skype instant message. This launches a program which then starts to encrypt/lock some or all of the files on your hard drive. In the meantime, you are shown a fake web page from the FBI, CIA or some other agency to make you believe you’re in legal trouble and could even face prosecution. They’ll use scare tactics such as telling you that your computer contains illegally downloaded files ranging anywhere from music and movies to child pornography. They will then ask you to pay money for them to unlock and restore your files. As you’ve already probably guessed, they won’t keep their promise. They’ve got your money and now can, and possibly will, sell your credit card info to other hackers and make even more money off of you. They have no reason to “help you out” so, don’t think for a minute that they will help even if you pay them. How can you protect yourself from malware? Keep all of your computer software up to date. Make sure that you have up-to-date firewall and antivirus software installed on your computer. Most importantly...

Words: 367 - Pages: 2

Premium Essay

Project Part 2 It Security

...Classification Description: Malicious Code and Activity Task Base on the premise that there is a mix of computers running Windows 2000, Windows XP, Windows Vista, Windows 7, and Mac OS X, you must research and devise a plan to thwart malicious code and activity by implementing countermeasures and prevention techniques for dealing with viruses, worms, logic bombs, Trojan horses, and other related forms of intentionally created deviant code. Introduction Malicious software is written with the intent to damage or infect the system of Richman Investment. Malicious code or software is a threat to any internet-connected device or computer. The main goal of the attack is to affect one of the three information security properties which are Confidentiality, Integrity, and Availability. Confidentiality is affected if the malicious software is successful at disclosing private information. Integrity is compromised if the malware can modify database records either immediately or over a period of time. Availability is affected if malware can erase or overwrite files or inflict considerable damage to storage media. SSCP® Domain Affected Malicious Code and Activity This domain examines the types of Malicious Code and Activities that can threaten the confidentiality, integrity, and availability of a system or information. The SSCP is expected to be familiar with the various types of Malicious Code and know how to implement effective countermeasures to prevent malicious...

Words: 953 - Pages: 4

Free Essay

Malware, Viruses, and Spam

...IS3110 Risk Management in Info Tech Security Malware and Viruses: Probability = 8, Impact = 9 Malware is short for malicious software. It is used to disrupt normal computer operation, gather sensitive information, or gain access to private computer systems. Viruses are a type of malware. Other types include, ransom ware, worms, trojan horses, key loggers, spyware, adware, and rogue security software. Malware impacts productivity, increases support costs, and can result in the compromise or loss of data and reputation. It can originate from a range of sources, spread quickly, and require an extensive approach to ensure the risk it poses is effectively managed. The most common approach to combating malware is firewalls and anti-virus software. Policies should also be put in place to make the Staff and Students aware of the potential threat and ways to keep it at bay. This approach requires the full co-operation of all college Staff, Faculty, and Students to make it work. Spam: Probability = 3, Impact = 2 Spamming is the use of electronic messaging systems to send unsolicited bulk messages (spam), especially advertising, at random. While the most commonly used form of spam is e-mail spam, it has also been appearing in other forms of media such as: instant messaging, Web search engine, spam in blogs, wiki spam, online classified ads, mobile phone messaging spam, (phone) call spam, social networking spam, and file sharing spam. The name is believed to come from a Monty...

Words: 375 - Pages: 2

Free Essay

Keeping Information Secure

...Keeping information secure in the workplace Hacking A hacker is a person who breaks codes and passwords to gain unauthorised entry to computer systems. A system hacker knows about designing and maintaining operating systems and a password hacker knows how to find out someone else's password. Computer hacking is most common among teenagers and young adults, although there are many older hackers as well. Many hackers enjoy learning more about how computers work and get excitement out of cracking the security of remote computer systems. They often enjoy programming and have expert-level skills in one particular program. For these individuals, computer hacking is a real life application of their problem-solving skills. The purpose of hacking could be anything like to get money illegally, destroying the network, stealing, for the fun or some other motives as well. There are very small numbers of computer hackers in the world because hacking requires lot of knowledge. To prevent this from happening Network security Your business needs to stay on top of changes that could affect the security of your LAN. Keep your operating system updated with the latest security patches and bug fixes. Assign access to directories and other network resources on a need-to-have basis, and remove a user's account immediately when they leave your company. Use network logging and security tests to check your network for security holes and possible break-ins. Passwords One bad password can...

Words: 1741 - Pages: 7

Free Essay

None

...1. What is the responsibility of computer owners to keep their systems secure from the attack of bot herders? A computer owner’s responsibility to secure their system from the attack of bot herders is to always keep the operating system and applications current to the most recent release. This is because; all software is subject to a constant revision process as new security vulnerabilities are found and patches to correct any problems. Keeping antivirus up to date is also important. 2. Is a computer owner who refuses to purchase or use software and hardware to block attackers complicit when a bot herders attack, captures and then uses an unprotected computer to commit a crime? I think the computer owners should also be held responsible if any bot herder use the owner’s computer for criminal purposes. The owner should provide effective firewalls and other safeguards to their computer. 3. Do software developers shoulder some of the blame when they distribute operating systems and applications that include security flaws that make computers vulnerable? I don’t think so. Becacuse for me, nobody is perfect. Anyone is entitled for any lapses he or she may execute but that does not mean there will be no room for correction. If further development is needed, then it should be done in order to eliminate these bot herders who kept on seeking cybercrimes. 5.16 What are two tactics criminals use to commit credit fraud? What are two countermeasures financial institutions...

Words: 872 - Pages: 4

Free Essay

Cmgt441 Week 3 Cyber-Attacks Individual Paper

...Cyber-attacks are a major problem to businesses as well as home users, it is in every nook, and cranny in the world of computers and prevention is a major concern to all. Many websites have contracted viruses or denial of service attacks and some host malware. Unsuspecting visitors visit these sites and contracted the spyware, malware, or viruses to their own home computer. What can we do for this? Well, there are preventive measures that one can take companies or home users. To find preventive measures the user must first understand the hacker and how they work. The vulnerabilities of one’s network are those call weaknesses or holes, hackers love these and can scan a system for days trying to find them. It is the administrator or IT department to find these such holes and find a way to abolish them before they are inundated with the chaos the hackers bring forth. Agreeing with “HackingAlert” the prevention is more difficult and complex in real life (HackingAlert). A large threat and a near fatal threat is the malware, it is used to capture vital information from the user’s computer, such as logins and passwords. This type of information is used in high-risk areas such as banking information. It can be well hidden in applications like a PowerPoint presentation, email, instant messenger, or a Web Site may have it hidden or embedded in the site itself. This paper will discuss these measures in hopes to educate the user in open-minded scenarios. First thing to know is that there...

Words: 816 - Pages: 4

Free Essay

Security

...In this age where everything is computerized and or internet based, people spend more time on their pc’s than ever. You can pay your bills, email, perform financial transactions with the bank, social network, shop, get a degree, and the list goes on. These activities involve the transmission of sensitive data over the network and open the door for criminals to steal your valuable personal information. Knowing how to stop these thieves is important. The purpose of this report is to address a few of these security issues and discuss ways to prevent attacks from occurring. Users pose the largest security threat to a pc. Users go out on the internet, haphazardly clicking away on links that could open their pc for an attack. Malware, phishing scams, bot herding, viruses, and worms are just a few of the ways that your pc can be attacked. First and foremost is the user needs to understand that they must use caution when accessing the network. Follow sensible rules such as, don’t open email from strangers, don’t click on strange links, and don’t walk away from the pc without logging out. Never give out passwords, and change passwords often. Every 30-90 days is good and make sure you create strong passwords. As a rule of thumb, only give users access to the specific files and folders that they need. Use common sense when you are on the network and you can prevent malicious attack on your pc and protect sensitive information. Another way to protect your pc from malicious attack...

Words: 693 - Pages: 3

Free Essay

Lab 3 Questions

...Removing Malware: Tools and Techniques Devan A. Dunham American Military University, ISSC342, Instructor Peter Mylonakos In the digital world, there are many tools and techniques to harm your computer, but there are also the same for protecting your computer as well. Malware, or malicious software, is software that is intended to damage or disable computers and computer systems. It is very dynamic and can be hard to detect sometimes because it may disguise itself as something that should be running on your computer. For example, after installing a program, Jim doesn’t realize that the executable file he downloaded was infected with malware named “Wajam” but disguised itself as “Software Updater” under Control Panel. It ran in the background and updated itself automatically without Jim’s knowledge. So how would Jim detect and remove this virus? First, Jim should always be aware what is running on his computer. On Windows machines specifically, opening the Task Manager and taking a quick look at processes will give the user a good outlook on what is running on the computer. Users should look for anything suspicious or unknown processes and do further research upon discovering them. Another simplified way to discover malware is to use an anti-virus program. There are many available to users and doing a quick internet search will yield thousands of programs, but sticking with reputable programs will serve its purposes. Scanning for malware and other viruses is as simple as click...

Words: 579 - Pages: 3

Premium Essay

Security Incident Report Lab

...Security Incident Report Incident Report #: IR-783 Reported Date and Time: January 12, 2014 Technician: Max Smith Site Location: Sales Department laptop belonging to Howard Telmik. Windows 7 OS. Identification (Type and how detected): Howard in sales called the IT help desk complaining that his system is really slow. He also stated his laptop is behaving weird. Some of his internal reports have been modified and emails from last week have shown up as read. He knows he it wasn't him because he was on vacation last week and left his laptop at home. Virus scan detected BackOrafice and NetBus. Triage (Impact): Fortunately it only affected the user's laptop and did not spread to the company network. Containment (Steps taken): 1) Disabled wireless on the laptop to disconnect it from the company network. 2) Ran a manual virus scan which identified the malware and placed it in quarantine. Investigation (Cause): Howard feels that the Anti-Virus (AV) makes his system slow. So he turned it off. Several weeks ago he received an email from a good and trusted friend that contains some vacation pictures. Shortly thereafter he received an offer to try a new and improved AV software and installed it. Recovery and Repair (Resolution): Used Antivirus software to quarantine and eradicate the malware. Implemented scanning of corporate email for malware and spam. Lessons Learned (Debriefing and Feedback): Antivirus software on systems should be configured to scan all hard drives...

Words: 298 - Pages: 2

Free Essay

Project Part 1,

...Project Part 1 : Multilayered Security Plan The safety and security of information owned by Richman Investments is extremely important and needs to monitored constantly. Through the following outline I hope to enhance the companies security, update systems and applications and ensure the integrity of the information stored on the network. The outlined areas will be monitored and reported monthly to senior management and will be updated as needed. The following outline will touch on each domain and will include security measures needed for those domains. 1.0 User Domain 2.1 Mobile storage disabled 2.2 Admittance to work area and computer with badge only. No visitors permitted 2.3 Multi-layered authentication with username/password and either token or biometrics 2.4 Training of new hires or quarterly training of current employees on security awareness 2.5 Security software with scanning capabilities to ensure no malware or virus intrusion is allowed. 2.0 Workstation 3.6 Hardware inventory taken quarterly to asses needs for new equipment or updates. 3.7 Software database examined to asses need for updates or antivirus renewal. 3.8 Different departments will be assessed groups in active directory to prevent authorization conflicts or confusion 3.9 Admittance to workstations will only be permitted with proper credentials, badge or token. 3.0 Lan 4.10 All cabinets and server rooms will be locked...

Words: 656 - Pages: 3

Premium Essay

Lab4

.... a) Virus – A malicious software that attaches itself to or copies itself into, another program for the purpose of causing the computer to follow instructure that were not by the original program developer. b) Worm – A malicious software programs that actively transmit themselves. Generally over networks to infect other computers. c) Spyware – A malicious software that covertly monitors and records pieces of information such as Web surfing activities and all data processed by the browser. d) Malicious code – Software that is designed to infiltrate a target computer and make it do something the attacker has instructed it to do. 2. An update should be done every day 3. Antivirus or something excepted to the program. And they assist to detecting. And by using cd the files are protected for any virus. 4. a) Internet e-mail-messages Shield - set your computer to update Viruses day or weekly and run a complete Virus Scan. b) Web Traffic Shield – Scan or update before using web browsing activities. c) P2P traffic Shield d) Network Traffic Shield 5) Yes they should be tested first before to fill out or put in public environment. 6) It depends on how often you run the scans vs your activity with the internet. Do a quick scan on a daily basis. Once a month I'll do a full scan. The quick scan should be good enough, though.... 7. 8. Yes 9. Home Page Hijacking, Pop up Advertisements, Crashes, firewall and antivirus programs are frequently turned off automatically. 10. what...

Words: 258 - Pages: 2

Free Essay

Death Penalty

...Project Part 2: Vulnerabilities in Information Technology (IT) Security To begin,   what’s security vulnerability? Most people think this would be an easy question to answer, but in fact it turns out not to be. This article discusses the definition used by the Microsoft Security Response Center (MSRC) to categorize the variety of issues we examine every day. An unintended flaw in software code or a system that leaves it open to the potential for exploitation in the form of unauthorized access or malicious behavior such as viruses, worms, Trojan horses and other forms of malware. Also referred to as security exploits, security vulnerabilities can result from software bugs, weak passwords or software that’s already been infected by a computer virus or script code injection, and these security vulnerabilities require patches, or fixes, in order to prevent the potential for compromised integrity by hackers or malware. Vulnerabilities a. re what information security and information assurance professionals seek to reduce. Cutting down vulnerabilities provides fewer options for malicious users to gain access to secure information. Computer users and network personnel can protect computer systems from vulnerabilities by keeping software security patches up to date. These patches can remedy flaws or security holes that were found in the initial release. Computer and network personnel should also stay informed about current vulnerabilities in the software they use and seek out ways...

Words: 1350 - Pages: 6