Foundations of Computer SecuritY
A
Seven Classes of Computer Security and Crime
Insiders overt Overt actions by insiders are often
performed by disgruntled employees and result in
destruction of data and equipment.
Insiders covert. Generally, insiders have more
information about a place of work than outsiders, which is
why they can wreak more havoc.
Insiders unintended. Employees make errors and can
also neglect their duties. Consequently, this class
encompasses actions such as wrong inputs, wrong data,
damage as a result of extreme temperatures or other
harsh conditions, and interruption of vital services.
Outsiders overt. Physical attacks on computer and
network facilities belong in this class as are also DoS
attacks.
Outsiders covert. This wide class consists of the various
types of rogue software sent from the outside to a
personal computer or to a large computer facility.
Outsiders unintended. It is fairly rare that an outsider
will harm a computer or data unintentionally.
Finally, there are accidents. They always happen, not
just in the computing field. Accidents are caused either by
nature, such as earthquake or flood, or indirectly by
humans.
Computer security threats and problem
Physical security. A personal computer can be stolen. A
large computer center can be broken into and equipment
taken.
Rogue software. We have all heard of computer viruses.
Small, sneaky programs that invade our computers and
spread quickly and silently.
Most computers are connected to networks, and most
local networks are connected to the Internet. Thus, there
is a large class of computer security threats that are
related to networks and fall under the category of network
security. This wide area
of security includes threats such as port scanning,
spoofing, password cracking, spyware, and identity
theft.
Computer Viruses
A biological virus (from the Latin for poison) is a shell
filled with
genetic material that it injectsintoalivingcell,
therebyinfectingit.
Thecellthenstartsmanufacturingcopiesof the virus. A
computer virus behaves similarly.
The term malware (slang for malicious software) is
also commonly used for rogue software. Malware is any
type of software designed specifically to disrupt a
computer or its operations. This includes viruses, worms,
and Trojan horses, but also spyware and adware.
A virus is a malicious program that resides inside
another program (its host). When the host is executed,
the virus also executes. It tries to replicate itself by
storing copies of itself in other programs.
A Trojan horse is a piece of software (normally malicious)
hidden inside an innocuous program. The horse performs
its destructive function, then starts its host program.
Trojan horse does not replicate itself and does not infect
other programs or files; its damage is localized
A tapeworm is a parasite that lives inside the body of a
bigger creature and sustains itself from its host’s
resources. A software worm is a program that executes
independently of other programs, replicates itself and
spreads through a network from computer to computer.
Virus Writers
1. Malicious intent. Such a person simply wants to
do damage and cause harm.
2. Aggression. An aggressive person needs a way
to vent their aggression, and virus writing is as
good as any other outlet.
3. Contempt for all authority. In science there is no
authority, but in other aspects of life we often
have to bow to authority for the public good.
4. Develop skills. A programmer hears about
software vulnerabilities and how they are
exploited by viruses.
5. Hobby and experiment. A programmer hears
about viruses and decides to learn more about
this unconventional field of programming.
6. Looking for acceptance in the underground
fraternity of virus writers. Someone who wants
to become a professional programmer but is
rejected by potential employers, may resort to
becoming a respected member of the
underground.
7. The thrill and rush of adrenalin. A youngster
who manages to shut down an important
commercial server, release a “successful” virus,
or break into a secret government computer
enjoys a rare feeling of power.
8. Enjoying the notoriety. It’s not hard to imagine
the pride felt by an unknown (and possibly
frustrated) person on seeing their virus listed in
antivirus software programs.
9. Out of frustration. Personal frustration (see
profiles below about the lack of girlfriends) often
provides a good reason for someone to release
malicious software.
10. Political convictions. Someone living in an
occupied or politically repressed country may take
out his frustration on others and feel powerful by
releasing a virus.
11. Social injustice. Someone who lives in a poor
country or neighborhood may likewise feel better
when he knows that others suffer too.
12. Let someone else do the dirty job. There are
Web sites with virus source codes written by
programmers who wait for someone else to copy
their code, perhaps modify it, and release it.
13. Teach security personnel a lesson. Yes, let
them learn once and for all how to protect their
precious computers and other equipment.