Smartronix Corporation, Information Assurance Division
Malicious code or malware comes in two forms: (1) viruses and worms that actively seek to ‘‘infect” anything that they come in contact with, and (2) Trojan horses, spyware, and adware, which require user action, such as clicking on a link. While ‘‘virus” is the most commonly-used term for havoc wreaked on computers without users’ knowledge or intention, ‘‘anti-virus” software ‘‘inoculates” against many other threats, too.
The computer virus requires some help or conditions in order to spread. You can contract a computer-virus simply by swapping floppy diskettes; however, most are contracted by opening e-mail attachments and software downloaded over the Internet. The macro-virus is code embedded in data files such as MS-Office documents. ‘‘Infection” can be either transparent — where the damage isn’t obvious to the user because the data-file’s content is unchanged or the executable file still works as expected — or disruptive — where the infected files are corrupted.
Worms were initially created as tools for system- and network-administrator tasks, such as load-balancing and, ironically, vulnerability-management. A worm is a little more sophisticated than a virus because it is self-contained, actively seeks out ways to spread, and can affect the operation or performance of the infected computer, a local-area network, or the Internet.
Unlike viruses or worms, software or code classified as Trojan, spyware, or adware doesn’t spread by itself but relies on the careless or unaware user. Just as the gift of the wooden horse captivated the citizens of Troy, Trojan horse software will masquerade as something enticing, inviting users to download and run it.
Trojans may allow users to play games or watch videos while running more sinister actions in the background, until presenting users with a fait accompli, such as lost files or reformatted hard-drives. Spyware and adware are similar to Trojans and are designed to exploit or influence end-users’ online habits.
Spyware might seek to capture personal information or other details that could be used for illicit gain. Adware logs end-users’ browsing habits and will attempt to steer them toward certain sites. For example, if you frequently search for or access sites regarding facial cream, you might be inundated with pop-up windows touting a particular product.
Common mechanisms for malware distribution are e-mail attachments, peer-to-peer networks, instant-messaging applications, and social-networking Web sites. A good precaution would be to disable all related built-in capability, such as infrared ports and wireless modems, and uninstall any related software.
This isn’t always practical and possibly inconvenient, so any remaining interface should be used with the utmost caution. For example, it’s safer to delete an unusual e-mail that supposedly originated with a familiar sender. Uncle Mac may send e-mails, but they’re plain-text two-liners since he doesn’t type very quickly. When his latest e-mail proclaims to notify you of a ‘‘once-in-a-lifetime opportunity” and features a three-megabyte attachment, you delete it immediately and in turn ask Uncle Mac with a separate e-mail whether he really intended to send such a message.
Review incoming content from e-mail and web-site carefully and read warnings as they appear before deleting them. Become an educated, diligent user, which will help keep your computers and data safe, provide you with peace of mind, and possibly prevent inconvenience, hassle, and loss. If you would like more information on any information security or IA matters or if you suspect any unusual activity or security compromise, contact your local IA Officer, IA Manager, the NAVAIR 7.2.6 Information Assurance office, or the NAVAIR 7.4.1 security office.