computer viruses & management strategies

Download Computer Viruses & Management Strategies

If you can't read please download the document

Upload: dasun-hegoda

Post on 16-Apr-2017

2.702 views

Category:

Technology


1 download

TRANSCRIPT

Computer Viruses & Management Strategies

Dasun Hegoda

Software Engineer

What we are going to talk

What's Malware

Spyware, Adware, Backdoor

What's A Computer Virus

Why Computer Malware(Virus)

How Viruses Are Created

How Viruses Are Spread

Types Of Malware

Types Of Viruses

What we are going to talk

How To Detect A Malware(Virus)

How To Protect Yourself

Top Anti-Virus Programs

BuzzWords

Bottom Line

Malware Definitions

Malware Definitions

Malware, short for malicious software, is software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

It can appear in the form of code, scripts, active content, and other software.

Malware includes computer viruses, ransomware, worms, trojan horses, rootkits, keyloggers, dialers, spyware, adware, malicious BHOs, rogue security software and other malicious programs.

Spyware, Adware, Backdoor

Spyware

Spyware is malicious computer program that does exactly what its name implies Eg:, spies on you.

After downloading itself onto your computer either through an email you opened, website you visited or a program you downloaded, spyware scans your hard drive for personal information and your internet browsing habits.

Some spyware programs contain keyloggers that will record personal data you enter in to websites, such as your login usernames and passwords, email addresses, browsing history as well as sensitive banking and credit information.

Some spyware can interfere with your computer's system settings, which can result in a slower internet connection.

Adware

Adware is any software that, once installed on your computer, tracks your internet browsing habits and sends you popups containing advertisements related to the sites and topics you've visited.

While this type of software may sound innocent, and even helpful, it consumes and slows down your computer's processor and internet connection speed.

Additionally, some adware has keyloggers and spyware built into the program, leading to greater damage to your computer and possible invasion of your private data.

Backdoor

A backdoor is a method of bypassing normal authentication procedures.

Once a system has been compromised one or more backdoors maybe installed in order to allow easier access in the future.

Backdoors may also be installed prior to malicious software, to allow attackers entry.

Crackers typically use backdoors to secure remote access to a computer, while attempting to remain hidden from casual inspection.

Computer Virus Definitions

What's A Computer Virus

A computer virus is a type of malware that, when executed, replicates by inserting copies of itself (possibly modified) into other computer programs, data files, or the boot sector of the hard drive; when this replication succeeds, the affected areas are then said to be "infected".

Viruses often perform some type of harmful activity on infected hosts, such as stealing hard disk space or CPU time, accessing private information, corrupting data, displaying political or humorous messages on the user's screen, spamming their contacts, or logging their keystrokes.

What's A Computer Virus

The defining characteristic of viruses is that they are self-replicating computer programs which install themselves without the user's consent.

Virus writers use social engineering and exploit detailed knowledge of security vulnerabilities to gain access to their hosts' computing resources.

The vast majority of viruses (over 99%) target systems running Microsoft Windows, employing a variety of mechanisms to infect new hosts, and often using complex anti-detection/stealth strategies to evade antivirus software.

World 1st Computer Virus

The first ever computer virus was developed in 1986 by two Pakistani brothers in Lahore Pakistan.

It was named Brain and was designed by Amjad Farooq Alvi and Basit Farooq Alvi with the intention of discouraging the piracy of a software written by them.

Why Computer Malware(Virus)

Why Computer Malware(Virus)

Seeking profit

Desire to send a political message

Personal amusement

To demonstrate that a vulnerability exists in software

For sabotage and denial of service

To explore evolutionary algorithms

Cause systems failures.

Steal information.

To prove a point, to prove it can be done, to prove ones skill or for revenge purposes.

How Viruses Are Created

How Viruses Are Created

The first step is that someone will create the virus.

The 2nd step is to pick out the program that the person wants to attach to.

The 3rd step is attaching the virus to the program.

The 4th step is to try to lure or advertise the program, so someone will download it in to your computer.

The 5th step is to have the virus get in to the computer.

The 6th step is to infect the computer.

The 7th step is to destroy all of the files on the computer & more.

How Viruses Are Spread

How Viruses Are Spread

Email attachments

Rogue Websites

Networks

Infected Boot Disks

Phishing Schemes

Infected Software

Hackers

Instant Messaging

Fake Anti Virus Software

From Mobile Devices

Friends and Relatives

Types Of Malware

Types Of Malware

Trojan horses : A Trojan horse is simply a computer program. The program claims to do one thing (it may claim to be a game) but instead does damage when you run it (it may erase your hard disk). Trojan horses have no way to replicate automatically.

Worms : A worm is a small piece of software that uses computer networks and security holes to replicate itself. A copy of the worm scans the network for another machine that has a specific security hole. It copies itself to the new machine using the security hole, and then starts replicating from there, as well.

Types Of Malware

Viruses : A virus is a small piece of software that piggybacks on real programs. For example, a virus might attach itself to a program such as a spreadsheet program. Each time the spreadsheet program runs, the virus runs, too, and it has the chance to reproduce (by attaching to other programs).

Types Of Malware

E-mail viruses : An e-mail virus travels as an attachment to e- mail messages, and usually replicates itself by automatically mailing itself to dozens of people in the victim's e-mail address book. Some e-mail viruses don't even require a double-click -- they launch when you view the infected message in the preview pane of your e-mail software

Types Of Viruses

Types Of Viruses

Boot Sector Virus

Browser Hijacker

Direct Action Virus

File Infector Virus

Macro Virus

Multipartite Virus

Polymorphic Virus

Resident Virus

Web Scripting Virus

How To Detect A Virus

How To Detect A Malware(Virus)?

Programs takes longer to load.

The programs sizes keep changing.

The drive light keeps flashing when you are not doing anything(Loading).

User created files have strange names.

The computer doesn't remember CMOS settings.

System crashes for no reason.

Screen sometimes flicker.

Files/directories sometimes disappear.

How To Detect A Malware(Virus)?

It might change the power ratings of your computer and could blast the system.

You cannot print items correctly.

Disks or disk drives are inaccessible.

Applications on the computer do not work correctly.

Strange sounds or music plays from the speakers unexpectedly.

Computer restarts every few minutes automatically.

........

How To Protect Yourself

How To Protect Yourself

Use Antivirus Programs

Use Firewalls

Make Passwords Encrypted

Scan your PC Daily

Switch off net when not using

Dont download software from unknown source

Disable Auto run

Read reviews before installing software

How To Protect Yourself

Download anti-spyware program

Dont open e-mail that you are not sure

Keep backups

Keep OS up to date

Scan removable storages

Top Anti-Virus Programs

Top Anti-Virus Programs

Bitdefender Antivirus

Kaspersky Anti-Virus

Norton AntiVirus

F-Secure Anti-Virus

AVG Anti-Virus

Avast! Pro Antivirus

McAfee AntiVirus

Panda Antivirus Pro

Buzzwords

FireWalls

A firewall is a software or hardware-based network security system that controls the incoming and outgoing network traffic by analyzing the data packets and determining whether they should be allowed through or not, based on applied rule set.

Firewalls can be defined in many ways according to your level of understanding. A firewall establishes a barrier between a trusted, secure internal network and another network (e.g., the Internet) that is not assumed to be secure and trusted.

FireWalls

Antivirus software

Antivirus, anti-virus, or AV software is computer software used to prevent, detect and remove malicious computer viruses.

Most software described as antivirus also works against other types of malware, such as malicious Browser Helper Objects (BHOs), browser hijackers, ransomware, keyloggers, backdoors, rootkits, trojan horses, worms, malicious LSPs, dialers, fraudtools, adware and spyware.

Computer security, including protection from social engineering techniques, is commonly offered in products and services of antivirus software companies.

Boot sector

A boot sector or boot block is a region of a hard disk, floppy disk, optical disc, or other data storage device that contains machine code to be loaded into random-access memory (RAM) by a computer system's built-in firmware.

The purpose of a boot sector is to allow the boot process of a computer to load a program (usually, but not necessarily, an operating system) stored on the same storage device.

Encryption

Encryption is the process of encoding messages (or information) in such a way that third parties cannot read it, but only authorized parties can.

Encryption doesn't prevent hacking but it prevents the hacker from reading the data that is encrypted.

The message or information (referred to as plaintext) is encrypted using an encryption algorithm, turning it into an unreadable ciphertext.

That's It!!!

Bottom Line

Computer viruses currently cause billions of dollars worth of economic damage each year, due to causing systems failure, wasting computer resources, corrupting data, increasing maintenance costs, etc.

In response, free, open-source anti-virus tools have been developed, and a multi-billion dollar industry of anti-virus software vendors has cropped up, selling virus protection to Windows users. Unfortunately, no currently existing anti-virus software is able to catch all computer viruses.

References

www.makeuseof.com/tag/types-computer-viruses-watch/