- 2068 Magh · 4+4 marks
Attacks from inside; malware, spyware
Short answer
Inside attacks come from authorized users: logic bombs, trap doors, login spoofing, and data theft. Malware includes viruses, worms, Trojans, ransomware, and rootkits that damage systems or steal data. Spyware secretly collects browsing habits, keystrokes, and passwords, sending them to attackers. Defenses include separation of duties, code review, antivirus, anti-spyware, and firewalls.
What are the attacks from inside? Explain about Malware and Spyware.
Attacks from inside
These are carried out by authorised users or programmers who already have access to the system.
- Logic bomb: code placed by a programmer that does nothing until a condition is met (e.g. his name missing from the payroll), then destroys data.
- Trap door (back door): hidden entry added during development that bypasses authentication.
- Login spoofing: a fake login screen collects other users' passwords.
- Data theft/misuse: authorised users copying or altering confidential data.
Defences: separation of duties, code review, audit logs, least privilege.
Malware
Malware is malicious software designed to damage the system, steal data or gain unauthorised control.
| Kind | Description |
|---|---|
| Virus | Attaches itself to a program or file and spreads when the host is run |
| Worm | Self-replicating program spreading across networks without a host (e.g. Morris worm) |
| Trojan horse | Looks useful but has hidden harmful code |
| Logic bomb | Triggered on a condition |
| Ransomware | Encrypts files and demands payment |
| Rootkit | Hides itself and gives privileged access |
Protection: antivirus, regular updates, not opening unknown attachments, and backups.
Spyware
Spyware is software that secretly installs itself and collects information about the user without consent, such as browsing habits, keystrokes (keyloggers), passwords and card numbers, and sends it to a remote attacker. It typically arrives with free software, plug-ins, or through infected web pages (drive-by download). It slows the system, changes the browser's home page and displays pop-ups.
Defence: anti-spyware tools, a firewall, downloading from trusted sources and keeping the browser updated.
✓ Answer checked by Claude Opus 5.5 (high effort)