ITM 431 Ch. 3

• General name for evil software
• Vulnerabilities are security flaws in specific programs
• Vulnerability-specific malware requires a specific vulnerability to be effective
• Universal Malware does not require a specific vulnerability to be effective

• Insider Threats
• Unpatched Vulnerability
• Next-Generation Malware

Trojan Virus Worm

• Code that attaches to other programs
• executes when program executes
• can travel through email, websites, social networking, USB Ram Sticks, peer to peer sharing

• antivirus programs scan files 
• patching may or may not help

• Stand-alone programs that do not need attachment
• can propagate like viruses through email which requires human gullibility
• Antivirus programs search for worms as well as viruses

• can only do this with specific vulnearblity
• amazing speed
• can be thwarted by firewalls and installing patches
• not by antivirus programs

directly propagating worms cannot be stopped by antivirus and can be stopped by firewalls and patches

programs that disguise themselves as system files

• Website activity trackers 
• keystroke loggers
• data mining software