Teardrop Attack in Computer Security

Malware

• Malware requires more technical knowledge and is usually used for targets of choice.
• It must be tailored to specific circumstances and deployed.

Spyware

• Forms of spyware include web cookies and key loggers.
• Legal uses of spyware include monitoring children's computer use and employee monitoring.
• Illegal uses of spyware involve covert deployment.
• There are free spyware removal software available.

Other Forms of Malware

• Rootkit is a collection of hacking tools that can:
  • Monitor traffic and keystrokes
  • Create a backdoor
  • Alter log files and existing tools to avoid detection
  • Attack other machines on the network

Malicious Web-Based Code

• Web-based mobile code is portable on all operating systems and can spread quickly on the web.
• Poorly scripted code can result in vulnerabilities.

Detecting and Eliminating Viruses and Spyware

• Antivirus software operates in two ways:
  • Scans for virus signatures and keeps the signature file updated
  • Watches the behavior of executables, such as attempts to access email address book or change registry settings
• Anti-spyware software is available from websites like webroot.com, spykiller.com, zerospy.com, and spectorsoft.com

Viruses

• A computer virus self-replicates and spreads rapidly, and may or may not have a malicious payload.
• Viruses can spread through:
  • Network connections
  • Email, using Microsoft Outlook or other email engines
  • Web site delivery, relying on end-user negligence
• Multiple vectors for a virus are becoming more common.
• Rules for avoiding viruses include:
  • Using a virus scanner
  • Not opening questionable attachments
  • Using a code word for safe attachments from friends
  • Not believing "Security Alerts"

Trojan Horses

• A Trojan horse is a program that looks benign but is not, and can:
  • Download harmful software
  • Install a key logger
  • Open a back door for hackers
• Company policy should prohibit unauthorized downloads.

The Buffer Overflow Attack

• A buffer overflow attack occurs when a program writes data beyond the allocated end of a buffer, causing valid data to be overwritten.
• This can cause execution of arbitrary (and potentially malicious) code.
• A buffer overflow attack can be prevented by using security patches and keeping software up-to-date.

Learn about the teardrop attack, a type of denial-of-service attack where a hacker sends fragmented messages to a victim system, causing it to crash or halt. Understand how this attack works and its effects on computer systems.