This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Spyware"
(→Description) |
|||
| Line 1: | Line 1: | ||
{{Template:Attack}} | {{Template:Attack}} | ||
| + | <br> | ||
| + | [[Category:OWASP ASDR Project]] | ||
| + | [[ASDR Table of Contents]]__TOC__ | ||
==Description== | ==Description== | ||
| Line 10: | Line 13: | ||
2. the display, in some cases, of advertisements | 2. the display, in some cases, of advertisements | ||
| − | == Risk | + | ==Risk Factors== |
High | High | ||
| Line 18: | Line 21: | ||
| − | == | + | ==Examples== |
<center> | <center> | ||
| Line 27: | Line 30: | ||
</center> | </center> | ||
| − | |||
| − | + | ==Related [[Threat Agents]]== | |
| − | + | * [[:Category:Client-side Attacks]] | |
| − | |||
| − | ==Related | ||
| − | |||
| − | *[[:Category:Client-side Attacks]] | ||
| − | |||
| − | |||
| + | ==Related [[Attacks]]== | ||
* [[Trojan Horse]] | * [[Trojan Horse]] | ||
* [[Phishing]] | * [[Phishing]] | ||
* [[:Category:Malicious Code Attack]] | * [[:Category:Malicious Code Attack]] | ||
| − | ==Related Vulnerabilities== | + | ==Related [[Vulnerabilities]]== |
| + | * TBD | ||
| − | TBD | + | ==Related [[Controls]]== |
| + | * TBD | ||
| − | == | + | ==References== |
| + | * http://cwe.mitre.org/data/definitions/506.html - Malicious | ||
| + | * http://en.wikipedia.org/wiki/Spyware - Spyware | ||
| − | |||
[[Category:Resource Manipulation]] | [[Category:Resource Manipulation]] | ||
[[Category:Attack]] | [[Category:Attack]] | ||
Revision as of 00:39, 14 September 2008
- This is an Attack. To view all attacks, please see the Attack Category page.
ASDR Table of Contents
Description
The spyware is a program that captures statistic information from user´s computer and sends it over internet without user acceptance. This information is usually obtained from cookies and web browser’s history. The spyware can also install other software, display advertisement, or redirect the web browser activity. A spyware differs from virus, worm and adware from various ways. The spyware does not self-replicate and distribute like virus and worm, and not necessarily displays advertisements like adware. The common characteristics between spyware and virus, worm, and adware are:
1. exploitation of infected computer for commercial purposes
2. the display, in some cases, of advertisements
Risk Factors
High
Some Spywares are very dificult to remove because they can hide they-selfs into Browser Cookies and Offline HTML Content in Temporary files.
Examples
Figure 1. A lot of toolbars added by spyware, and some working as spyware
Related Threat Agents
Related Attacks
Related Vulnerabilities
- TBD
Related Controls
- TBD
References
- http://cwe.mitre.org/data/definitions/506.html - Malicious
- http://en.wikipedia.org/wiki/Spyware - Spyware
