Spyware

Short Description
spyware generates revenues from the information collected and entails basic … to deploy and install spyware on the target systems, and loss expectance in …

Website: www.cert.org | Filesize: 63kb

Content
Copyright 2005 Carnegie Mellon University
1
Spyware
Aaron Hackworth
CERT Coordination Center1
1 Introduction
Spyware has existed at least since the early 1980’s when keyloggers2 were discovered on
computers at university campuses. Subsequently, there has been a steady growth in the use of
spyware by online attackers and traditional criminals to execute crimes against individuals,
businesses, and governments.
These crimes have both direct economic impacts, as in the case of identity theft and credit card
fraud, as well as more subtle, lasting impacts, caused by shaking consumer’s confidence and
willingness to participate in modern electronic commerce. Reducing threats from spyware is an
important part of slowing the erosion of public faith in online business transactions and
maintaining healthy economic growth.
Making lasting reductions in spyware activity requires recognition of the financial motives and
taking steps towards architecting the value out of the activity. As a business activity, deploying
spyware generates revenues from the information collected and entails basic costs such as the
purchase or development of malicious software (known as malware), distribution channel costs
to deploy and install spyware on the target systems, and loss expectance in the form of criminal
or civil penalties levied by the courts….