Definition Malicious code / destroyer (malicious codes, or abbreviated malcodes) is defined as all kinds of programs, macro or script that can diesekusi and created with the purpose to damage the computer system. Therefore, the bug that made accidentally by programmers, not included in this category. But for the bug that really disrupt, many people mengkategorikannya as malcode. First used the term "Malware (= Malicious Software)" is intended to malcode. But the term is too weak and narrow, so that e-mail false / lying Unsurprisingly, not the software can not be included in this group. Therefore, the term used malcode, not malware. Classification Code destroyer can be classified into 3 kinds of groups: viruses, worms and Trojan Horses, and some programs that have bugs. Virus Evil virus has the ability to reproduce themselves and consists of a set of code that can modify the target code that is running, or you can also modify the internal structure of the target code, so that the target code before running forced to run a virus. Viruses often display a message that is not objectionable, harmful appearance display, delete the C-MOS memory, damage information in the hard disk, etc.. Effect caused the virus to the development of a serious enough of late. Examples of the virus: Brain, Ita half, Die hard, XM / Laroux, Win95/CIH The virus can still be divided into several categories: 1. Boot Virus: If the computer starts up, an initial program in the boot sector will be run. The virus is in the boot sector virus called the boot. 2. File Viruses: File virus is a virus that menginfeksi executable program. Reported that almost 80% of the virus is a file virus. 3. Multipartite Viruses: Viruses that menginfeksi both files and boot sector. 4. Macro Virus: Recently found. The target is not executable programs, but dokument files such as Microsoft Excel or Word. He will start the program when the application menginfeksi read the document that contains macros. Worm Worm program that is intended to copy itself to a computer memory ONLY. Fundamental difference from worms and viruses is, whether the target menginfeksi code or not. Menginfeksi target the virus code, but no worms. Worm ngendon only in memory. Worm initially found in a large computer (1970), and the final is only found in the small computer as a PC. Especially since 1999, where many work email circulating through the media. Examples of worms: I-Worm/Happy99 (Remix), I-Worm/ExploreZIP, I-Worm/PrettyPark, I-Worm/MyPics Trojan Horse Trojan Horse produced with the purpose of evil. Contrasting with the virus, Trojan Horse can not produce themselves. In general, they were brought by other utility programs. Utility program is contain himself, or a Trojan Horse itself learner "attitude" as a utility program. Examples of Trojan Horse: Win-Trojan/Back Orifice, Win-Trojan/SubSeven, Win-Trojan/Ecokys (Korean) Trojan Horse can still be divided into: 1. DOS Trojan Horse: Trojan Horse that run on DOS. It reduces the speed of the computer or delete files on the day or certain situations. 2. Windows Trojan Horse: the system runs on Microsoft Windows. Number of Windows Trojan Horse increased since 1998 and used as a hacking program for the purpose of evil that can be collecting information from the internet connected computer. Malcode trend in Japan in 1999 Virus traditional: 6% Windows Virus: 8% Worm: 31% (1998, almost 0%) Macro Virus: 55% References Hwang Kyu-beom, Kim Kwangjo, Joonsang Beak, Charles Ahn, "Trend of the Malicious Codes and Their Countermeasures," SCIS2000, Okinawa, Japan, January 26-28, 2000. | ||
Rabu, 17 Desember 2008
komputer
Langganan:
Posting Komentar (Atom)
Tidak ada komentar:
Posting Komentar