Security
  Home arrow Security arrow Page 6 - What’s behind the curtain? Part I
Dev Shed Forums 
Administration  
Apache  
BrainDump  
DHTML  
Flash  
Java  
JavaScript  
Multimedia  
MySQL  
Oracle  
Perl  
PHP  
Practices  
Python  
Reviews  
Security  
Style-Sheets  
Web Services  
XML  
Zend  
Zope  
Forums Sitemap 
IBM® developerWorks 
Dedicated Servers 
E-Commerce Hosting 
Linux Web Hosting 
Managed Hosting 
Small Business Hosting 
Download TestComplete 
VPS Hosting 
Weekly Newsletter

 
Developer Updates  
Free Website Content 
IBM Rational Software Development Conference
 RSS  Articles
 RSS  Forums
 RSS  All Feeds
Write For Us Get Paid 
Request Media Kit
Contact Us 
Site Map 
Privacy Policy 
Support 
 USERNAME
 
 PASSWORD
 
 
  >>> SIGN UP!  
  Lost Password? 
SECURITY

What’s behind the curtain? Part I
By: Eliana Stavrou
  • Search For More Articles!
  • Disclaimer
  • Author Terms
  • Rating: 3 stars3 stars3 stars3 stars3 stars / 8
    2005-02-21

    Table of Contents:
  • What’s behind the curtain? Part I
  • Types of attackers
  • Anatomy of an attack
  • Targets
  • Malicious Code
  • Backdoors

  • Rate this Article: Poor Best 
      ADD THIS ARTICLE TO:
      Del.ici.ous Digg
      Blink Simpy
      Google Spurl
      Y! MyWeb Furl
    Email Me Similar Content When Posted
    Add Developer Shed Article Feed To Your Site
    Email Article To Friend
    Print Version Of Article
    PDF Version Of Article
     
     
     
    ADVERTISEMENT

    TestComplete™ automates software testing for a fraction of what the big guys charge. Easy functional and load testing for all Windows, .NET, Java and Web apps. Download a free trial now.

    What’s behind the curtain? Part I - Backdoors
    (Page 6 of 6 )

    Backdoors are used to provide access to a system after the attacker has defeated the security mechanisms and gained control of the system. When the programmer writes the code for an application, he deliberately installs the backdoor. In some circumstances the programmer installs the backdoor for administrative purposes; however, attackers can detect these backdoors or install their own backdoor. A backdoor is a way of retaining the illegal entrance to the system for further exploiting the system. In addition, by using a backdoor, the compromised system can be used for launching denial of service attacks to other systems.

    Logic bomb

    A logic bomb (or slag code) is special programming code attached to other files that is triggered only after a predefined period of time has passed, on a specific date, or when a specific even occurs. For example, a virus can be considered a logic bomb if it is activated at a certain time. Logic bombs can be set to alter your file, format your hard drive or execute any other undesirable action.

    Mobile code

    The need for dynamic content has lead to the adoption of mobile code like Java Applets and Active X. Malicious code written in these languages can be executed when executing the associated Web page; their target is usually to steal data or disable the systems.

    Conclusions

    In this article I listed the threats associated with malicious code and specifically I’ve talked about six threats that are under the malicious code umbrella. As I said in the introduction of this article the list of threats is endless; more threats will be discussed on the next part of this article. 


    DISCLAIMER: The content provided in this article is not warranted or guaranteed by Developer Shed, Inc. The content provided is intended for entertainment and/or educational purposes in order to introduce to the reader key ideas, concepts, and/or product reviews. As such it is incumbent upon the reader to employ real-world tactics for security and implementation of best practices. We are not liable for any negative consequences that may result from implementing any information covered in our articles or tutorials. If this is a hardware review, it is not recommended to open and/or modify your hardware.

       · hm... so someone writes an article on security and doesn't even know the difference...
       · Dear friend,when I stated that I won't get into discussion of the exact...
       · e,(me again, just still not bothering to login for the sake of a single...
       · Dear friend,as I said we all need to clear up the difference between hackers and...
       · e,i look forward to reading the next two! people (developers especially) need as...
       · AMEN! SOMEONE WHO KNOWS WHAT THE DIFFERENCE IS! I loath the notion people have when...
       · We do know the difference here, but we were following the usual practice in the...
     

       

    SECURITY ARTICLES

    - An Epilogue to Cryptography
    - A Sequel to Cryptography
    - An Introduction to Cryptography
    - Security Overview
    - Network Security Assessment
    - Firewalls
    - What’s behind the curtain? Part II
    - What’s behind the curtain? Part I
    - Vectors
    - PKI: Looking at the Risks
    - A Quick Look at Cross Site Scripting
    - PKI Architectures: How to Choose One
    - Trust, Access Control, and Rights for Web Se...
    - Basic Concepts of Web Services Security
    - Safeguarding the Identity and Integrity of X...




    © 2003-2008 by Developer Shed. All rights reserved. DS Cluster 3 hosted by Hostway