IAS - FINALS

an engineer at BBN Technologies developed the first known computer virus in the year 1971.

Robert Thomas

is a malicious program that self-replicates by copying itself to another program

Computer Virus

Types of Viruses

Boot Sector Virus

Direct Action Virus

Resident Virus

Multipartite Virus

Polymorphic Virus

Overwrite Virus

Spacefiller Virus

File Infectors

Macro Virus

Rootkit Virus

System or Boot-Record Infectors

– This type of virus infects the master boot record and it is challenging and a complex task to remove this virus and often requires the system to be formatted. Mostly it spreads through removable media.

Boot Sector Virus

This is also called non-resident virus, it gets installed or stays hidden in the computer memory.

Direct Action Virus

Unlike direct action viruses, resident viruses get installed on the computer. It is difficult to identify the virus and it is even difficult to remove a resident virus.

Resident Virus

This type of virus spreads through multiple ways

Multipartite Virus

These type of viruses are difficult to identify with a traditional anti-virus program.

Polymorphic Virus

This type of virus deletes all the files that it infects

Overwrite Virus

• This is also called “Cavity Viruses”.

• This is called so as they fill up the empty spaces between the code and hence does not cause any damage to the file.

Spacefiller Virus

viruses come attached with program files, such as .com or .exe files. Some file

infector viruses infect any program for which execution is requested, including .sys, .ovl, .prg, and .mnu files. Consequently, when the particular program is loaded, the virus is also loaded.

File infectors

particularly target macro language commands in applications like Microsoft Word. The same is implied on other programs too.

Macro viruses

The virus design purpose tends to vary and Overwrite Viruses are predominantly designed to

destroy a file or application’s data. As the name says it all, the virus after attacking the computer starts overwriting files with its own code.

Overwrite Viruses

It is a malware type which has the ability to change or mutate its underlying code without changing its basic functions or features.

Polymorphic Viruses

implants itself in the memory of a computer. Basically, the original virus program is not required to infect new files or applications. Even when the original virus is deleted, the version stored in memory can be activated.

Resident Viruses

a malware type which secretly installs an illegal rootkit on an infected system. This opens the door for attackers and gives them full control of the system.

Rootkit Viruses

infect executable code found in specific system areas on a disk. As the name implies, they attach to the USB thumb drives and DOS boot sector on diskettes or the Master Boot Record on hard disks.

System or Boot-record Infectors

• Slower system performance

• Pop-ups bombarding the screen

• Programs running on their own

• Files multiplying/duplicating on their own

• New files or programs in the computer

• Files, folders or programs getting deleted or corrupted

• The sound of a hard drive

Signs of Virus Infection

#Safe Mode
#Delete Temporary Files
#Download Virus/Malware Scanner
#Run a Virus/Malware Scan
#Reinstall the Software or Damaged Files

How To Get Rid Of Computer Virus

Visit a social networking site and look for the site’s privacy policy. The link is typically found at

the bottom of the page and sometimes labeled only as “Privacy.

Private Policies

is intrusive software that is designed to damage and destroy computers and

computer systems.

Malware

are a subgroup of malware. A virus is malicious software attached to a document or

file that supports macros to execute its code and spread from host to host.

Viruses

are malicious software that rapidly replicates and spreads to any device within the network.

Worms

Are disguised as helpful software programs, but once the user downloads it, the virus

can gain access to sensitive data and then modify, block, or delete the data.

Trojan virus

is a form of malicious software and Internet fraud that misleads users into believing there is a virus on their computer, and to pay money for a fake malware removal tool (that actually introduces malware to the computer).

Rogue security software

is malicious software that runs secretly on a computer and reports back to a remote user

Spyware

which records your keystrokes to reveal passwords and personal

information.

key logger

is malicious software used to collect data on your computer usage and provide appropriate advertisements to you

Adware

malicious software that gains access to sensitive information within a system, encrypts that information so that the user cannot access it, and then demands a financial payout for the data to be released

Ransomware

- is a type of memory-resident malware. As the term suggests, it is malware that operates from a victim’s computer’s memory, not from files on the hard drive. Because there are no files to scan, it is harder to detect than traditional malware.

Fileless Malware

o Spamming, unsolicited or undesired electronic messages

o Email spam, unsolicited, undesired, or illegal email messages

Spam

is the fraudulent attempt to obtain sensitive information such as usernames, passwords and credit card details by disguising oneself as a trustworthy entity in an electronic communication

Phishing

is a cyber-attack intended to redirect a website’s traffic to another, fake site

Pharming

Complete the general scenario of electronic transaction

Customer

Merchant

Payment Gateway

Customer Financial Institution

Merchant Financial Institution`

a system which ensures security and integrity of electronic transactions done using credit cards in a scenario.

Secure Electronic Transaction (SET) Protocol

Participants in SET :

Cardholder

Issuer

Merchant

Acquirer

Certificate Authority

coined the term “computer virus” and it was after a year in 1983. The term came into being when he attempted to write an academic paper titled “Computer Viruses – Theory and Experiments” detailing about the malicious programs in his work.

Fred Cohen

To prevent theft, SET allows customers to check previous relationships between merchant and financial institution. Standard X.509V3 certificates are used for this verification.

Merchant Authentication

SET checks if use of credit card is done by an authorized user or not using X.509V3 certificates.

Customer / Cardholder Authentication

Confidentiality refers to preventing unintended people from reading the message being transferred. SET implements confidentiality by using encryption techniques. Traditionally DES is used for encryption purpose.

Provide Message Confidentiality

SET doesn’t allow message modification with the help of signatures. Messages are protected against unauthorized modification using RSA digital signatures with SHA-1 and some using HMAC with SHA-1

Provide Message Integrity

Provide Authentication
-Merchant Authentication
-Customer / Cardholder Authentication
Provide Message Confidentiality
Provide Message Integrity

SET functionalities

The dual signature is a concept introduced with SET, which aims at connecting two information pieces meant for two different receivers :

- Order Information (OI) for merchant

- Payment Information (PI) for bank

Dual Signature