Logic/time bomb - Revision history

Andy Giannini: adding some content

2012-12-20T04:21:59Z

adding some content

KirstenS at 21:58, 7 April 2009

2009-04-07T21:58:45Z

KirstenS at 16:23, 27 October 2008

2008-10-27T16:23:44Z

KirstenS at 13:42, 7 September 2008

2008-09-07T13:42:52Z

KirstenS: /* Related Vulnerabilities */

2008-09-07T13:42:29Z

‎Related Vulnerabilities

KirstenS at 13:42, 7 September 2008

2008-09-07T13:42:11Z

Nsrav at 12:50, 5 November 2007

2007-11-05T12:50:23Z

Weilin Zhong at 17:18, 12 June 2006

2006-06-12T17:18:09Z

New page

{{Template:Attack}}

==Description==

==Examples ==

==Related Threats==

==Related Attacks==

==Related Vulnerabilities==

==Related Countermeasures==

==Categories==

{{Template:Stub}}

[[Category:Malicious Code Attack]]

@@ Line 1: / Line 1: @@
 {{Template:Threat}}
 <br>
@@ Line 10: / Line 8: @@
 ==Description==
-A threat agent is a group of "attackers" that carry out an [[attack]]. They can be human (intentional or unintentional) or natural (flood, fire, etc...).
+A logic bomb is a piece of malicious code that executes when specific trigger conditions are met. A typical example would be a program that monitors a company's payroll system, and attacks the company if a specific employee is terminated. A time bomb is a type of logic bomb that uses a date and time as its trigger condition. They are differentiated from software "easter eggs" by their malicious nature.
 ==Risk Factors==
-* Talk about the [[OWASP Risk Rating Methodology|factors]] that make this threat agent likely or unlikely to attack
+* [[Computer Viruses]] occasionally use logic bombs as their payloads. This allows the virus time to spread before alerting infected users with its attack.
-* Be sure to discuss the size, motivation, capabilities, and opportunity of this threat agent
+* [[internal software developer | Internal developers]] or [[Contractors | IT contractors]] are the typical threat agents capable of delivering logic bombs.
 ==Examples==
-===Short example name===
+===Medco Health Solutions===
-: A short example description, small picture, or sample code with [http://www.site.com links]
+: A unix systems administrator recieved 30 months in federal prison for inserting a logic bomb in Medco Health Solutions servers. [http://www.pcworld.com/article/137479/article.html link]
-===Short example name===
+===Siberian Pipeline Sabotage===
-: A short example description, small picture, or sample code with [http://www.site.com links]
+: It is alleged (and disputed) that a 1982 explosion of a Soviet natural gas pipeline was caused by a logic bomb. [http://www.nytimes.com/2004/02/02/opinion/the-farewell-dossier.html link]
 ==Related [[Attacks]]==
-* [[Attack 1]]
+* [[Computer Viruses]]
 ==Related [[Vulnerabilities]]==
-* [[Vulnerability 1]]
+TBD
 ==References==
-* http://www.link1.com
+* [http://en.wikipedia.org/wiki/Logic_bomb Wikipedia]
-* [http://www.link2.com Title for the link2]
+* [http://computer.howstuffworks.com/logic-bomb.htm HowStuffWorks]
 __NOTOC__

@@ Line 5: / Line 5: @@
 <br>
 [[Category:OWASP ASDR Project]]
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

← Older revision		Revision as of 16:23, 27 October 2008
Line 49:		Line 49:


−	[[Category:Malicious Code ~~Attack~~]]	+	[[Category:Embedded Malicious Code]]

@@ Line 1: / Line 1: @@
 {{Template:Threat}}
 <br>
@@ Line 46: / Line 48: @@
 [[Category:Malicious Code Attack]]

@@ Line 1: / Line 1: @@
 {{Template:Threat}}
@@ Line 38: / Line 37: @@
 * [[Vulnerability 1]]
 * [[Vulnerabiltiy 2]]
 ==References==

← Older revision		Revision as of 12:50, 5 November 2007
Line 1:		Line 1:
−	~~{{Template:Attack}}~~

	==Description==		==Description==