This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Spyware"
| Line 2: | Line 2: | ||
<br> | <br> | ||
[[Category:OWASP ASDR Project]] | [[Category:OWASP ASDR Project]] | ||
| + | |||
| + | Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' | ||
| + | |||
==Description== | ==Description== | ||
Revision as of 11:51, 23 April 2009
- This is an Attack. To view all attacks, please see the Attack Category page.
Last revision (mm/dd/yy): 04/23/2009
Description
Spyware is a program that captures statistical information from a user's computer and sends it over internet without user acceptance. This information is usually obtained from cookies and the web browser’s history. Spyware can also install other software, display advertisements, or redirect the web browser activity. Spyware differs from a virus, worm, and adware in various ways. Spyware does not self-replicate and distribute itself like viruses and worms, and does not necessarily display advertisements like adware. The common characteristics between spyware and viruses, worms, and adware are:
- exploitation of the infected computer for commercial purposes
- the display, in some cases, of advertisements
Risk Factors
High
Some Spyware is very dificult to remove because it can hide in Browser Cookies and Offline HTML Content in Temporary files.
Examples
Figure 1. A lot of toolbars added by spyware, and some working as spyware
Related Threat Agents
Related Attacks
Related Vulnerabilities
- TBD
Related Controls
- TBD
References
- http://cwe.mitre.org/data/definitions/506.html - Malicious
- http://en.wikipedia.org/wiki/Spyware - Spyware
