Malware is a collective term for any malicious software which enters system without authorization of user of the system. The term is created from merging the words 'MALICIOUS' and ' SOFTWARE'. Malware is a very big threat in today's computing world. It continues to grow in volume and evolve in complexity. As more and more organizations try to address the problem, the number of websites distributing the malware is increasing at an alarming rate and is getting out of control. Most of the malware enters the system while downloading files over Internet.
Once the malicious software finds its way into the system, it scans for vulnerabilities. of operating system and perform unintended actions on the system finally slowing down the performance of the system.
Malware has ability to infect other executable code, data/system files, boot partition of drives, and create excessive traffic on network leading to denial of service. When user execute the infected file; it becomes resident in memory and infect any other file executed afterwards. If operating system has a vulnerability, malware can also take control of system and infect other systems on network. Such malicious programs (virus is more popular) are also known as parasites and adversely affect the performance of machine generally resulting in slow-down.
Some malware are very easy to detect and remove through antivirus software. These antivirus software maintains a repository of virus signatures i.e binary pattern characteristic of malicious code. Files suspected to be infected are checked for presence of any virus signatures. This method of detection worked well until the malware writer started writing polymorphic and metamorphic malware. These variant of malware avoid detection through use of encryption techniques to thwart signature based detection. Security products such as virus scanners look for characteristics byte sequence to identify malicious code. The quality of the detector is determined by the techniques employed for detection. A good malware detection technique must be able to identify malicious code that is hidden or embedded in the original program and should have some capability for detection of yet unknown malware. Commercial virus scanners have very low resilience to new attacks because malware eriters continuously make use of new obfuscation methods so that the malware could evade detection.
" Malware are malignant software's. It is designed to damage computer systems without the knowledge of the owner using the system. Software's from reputable vendors also contain malicious code that affects the system or leaks information's to remote servers. Malware's includes computer viruses, spyware, adware, rootkits, Trojens, Dialers etc. Malware detection methods like signature based detection, reverse engineering of obfuscated code, to detect malicious nature. "
1 Comments
How can work backdoor?
ReplyDelete