Wednesday 13 July 2011

notes for assignment1:Think, Pair, Share, Online Discussion

Question 4:Internet and Computer Security (Virus, Spam, Phishing)

Definition:

virus :A computer virus is a computer program that can copy itself and infect a computer. The term "virus" is also commonly but erroneously used to refer to other types of malware, including but not limited to adware and spyware programs that do not have the reproductive ability. A true virus can spread from one computer to another (in some form of executable code) when its host is taken to the target computer; for instance because a user sent it over a network or the Internet, or carried it on a removable medium such as a floppy disk, CD, DVD, or USB drive.

spam:Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately. While the most widely recognized form of spam is e-mail spam, the term is applied to similar abuses in other media

phishing: the activity of tricking people by getting them to give their identity, bank account numbers, etc. over the Internet or by email, and then using these to steal money from them

VIRUS

DIFFERENT TYPES OF COMPUTER VIRUSES

  • Resident Viruses
This type of virus is a permanent which dwells in the RAM memory. From there it can overcome and interrupt all of the operations executed by the system: corrupting files and programs that are opened, closed, copied, renamed etc. Examples include: Randex, CMJ, Meve, and MrKlunky.   

  • Direct Action Viruses
The main purpose of this virus is to replicate and take action when it is executed. When a specific condition is met, the virus will go into action and infect files in the directory or folder that it is in and in directories that are specified in the AUTOEXEC.BAT file PATH. This batch file is always located in the root directory of the hard disk and carries out certain operations when the computer is booted.

  • Overwrite Viruses
Virus of this kind is characterized by the fact that it deletes the information contained in the files that it infects, rendering them partially or totally useless once they have been infected. The only way to clean a file infected by an overwrite virus is to delete the file completely, thus losing the original content. Examples of this virus include: Way, Trj.Reboot, Trivial.88.D.

  • Boot Virus
This type of virus affects the boot sector of a floppy or hard disk. This is a crucial part of a disk, in which information on the disk itself is stored together with a program that makes it possible to boot (start) the computer from the disk. The best way of avoiding boot viruses is to ensure that floppy disks are write-protected and never start your computer with an unknown floppy disk in the disk drive. Examples of boot viruses include: Polyboot.B, AntiEXE.

  • Macro Virus
Macro viruses infect files that are created using certain applications or programs that contain macros. These mini-programs make it possible to automate series of operations so that they are performed as a single action, thereby saving the user from having to carry them out one by one. Examples of macro viruses: Relax, Melissa.A, Bablas, O97M/Y2K.

  • Directory Virus
Directory viruses change the paths that indicate the location of a file. By executing a program (file with the extension .EXE or .COM) which has been infected by a virus, you are unknowingly running the virus program, while the original file and program have been previously moved by the virus. Once infected it becomes impossible to locate the original files.

  • Polymorphic Virus
Polymorphic viruses encrypt or encode themselves in a different way (using different algorithms and encryption keys) every time they infect a system. This makes it impossible for anti-viruses to find them using string or signature searches (because they are different in each encryption) and also enables them to create a large number of copies of themselves. Examples include: Elkern, Marburg, Satan Bug, and Tuareg.

  • File Infectors
This type of virus infects programs or executable files (files with an .EXE or .COM extension). When one of these programs is run, directly or indirectly, the virus is activated, producing the damaging effects it is programmed to carry out. The majority of existing viruses belong to this category, and can be classified depending on the actions that they carry out.

  • Companion Viruses
Companion viruses can be considered file infector viruses like resident or direct action types. They are known as companion viruses because once they get into the system they "accompany" the other files that already exist. In other words, in order to carry out their infection routines, companion viruses can wait in memory until a program is run (resident viruses) or act immediately by making copies of themselves (direct action viruses). Some examples include: Stator, Asimov.1539, and Terrax.1069

  • FAT Virus
The file allocation table or FAT is the part of a disk used to connect information and is a vital part of the normal functioning of the computer.This type of virus attack can be especially dangerous, by preventing access to certain sections of the disk where important files are stored. Damage caused can result in information losses from individual files or even entire directories.

  • Worms
A worm is a program very similar to a virus; it has the ability to self-replicate, and can lead to negative effects on your system and most importantly they are detected and eliminated by antiviruses. Examples of worms include: PSWBugbear.B, Lovgate.F, Trile.C, Sobig.D, Mapson.

  • Trojans or Trojan Horses
Another unsavory breed of malicious code are Trojans or Trojan horses, which unlike viruses do not reproduce by infecting other files, nor do they self-replicate like worms.



WAYS TO PREVENT COMPUTER VIRUSES ATTACK


1. Install a reliable anti virus program

2. Install anti-spyware and anti-malware programs.

3. Avoid suspicious

4. Never Open Email Attachments Without Scanning Them First

5. Set up Automatic Scans

6. Watch Your Downloads

7.Update your computer program

8. Know What To Look For

9. Stay Away From Cracked Software.

10. Install a Firewall


Spam
how spamming occurs?

Spammers collect email addresses from chat rooms, websites, customer lists, newsgroups, and viruses which harvest users' address books, and are sold to other spammers. They also use a practice known as "email appending" or "e-pending" in which they use known information about their target (such as a postal address) to search for the target's email address. Much of spam is sent to invalid email addresses.
The cost of spam is far less than postal bulk mailings. An advertiser could spam 10,000 recipients for under $100 versus several thousand dollars for a postal mailing.

effect of spamming:
Receiving spam is actually more like receiving a junk fax or a sales call on a cellular phone because the cost of distributing the advertisement is borne by the recipient (or the recipient's Internet service provider (ISP)), not the sender. (The annual cost of spam to U.S. corporations is currently $9 to $10 billion a year.)
Every ISP pays for the right to operate on the Internet by purchasing bandwidth, the "space" it uses to transmit over the Internet. As the volume of spam directed through an ISP increases, the bandwidth becomes crowded, often slowing down the user's Internet access. To counter this, the ISP must pay for filtering software (which can also slow access) or pay to increase the amount of bandwidth. In both cases the expense is often passed along to subscribers. To get an idea of how much bandwidth is consumed by spam, America Online estimated that one-third of the 30 million daily email messages it transfers is spam.

how to prevent spam:
  1. Never, ever reply to a spam message.
  2. Don’t click any links in a spam email.
  3. Don’t forward an email from someone you don’t know to a list of people.
  4. Before you join a list, make sure the list owner or Web master will not sell your address.
  5. Preview your messages before you open them.
  6. Use a complicated email username.
  7. Use a spam filter.
  8. Make sure your privacy settings are set so you don't receive marketing from other sites in your AOL and Yahoo profiles.
Phishing

Overview of Phishing Scams
Phishing scams are just another attempt to get valuable information. Scammers send a mass email to every address they can find. Typically the message will appear to come from a bank or financial institution. The email states that you should update your information for one reason or another, and they usually provide a link that you can click to do so.
This all sounds reasonable and it may look legitimate, but phishing scams are anything but legitimate. The link provided does not take you to the financial institution’s website. Instead, you’ll be submitting your information to a website run by the scammers.

Why People Fall for Phishing Scams
Anybody can be tricked by a sophisticated phishing scam. Simple phishing scams are easy to spot, but the best scammers are actually pretty smart. They use a variety of tricks to make the phishing scam look like a legitimate process. For example, they might include a graphic from the bank right on the email message or website. Or, the link provided in the email may look like it goes to the bank’s website while the victim is actually sent to a very

Advice for Victims of Phishing Scams
If you have been snagged by phishing scams in the past, you need to be vigilant. First, let your financial institution know what happened. They will likely want to pursue the scammer, and they will monitor your account more closely. Next, I always suggest that victims of phishing scams put a fraud alert on their credit report by contacting one of the major credit agencies. Finally, you’ll need to keep a close eye on your mail and your accounts. If statements stop showing up or if you see unusual activity, call your bank immediately.


The Process of Phishing



  Planning. Phishers decide which business to target and determine how to get e-mail addresses for the customers of that business. They often use the same mass-mailing and address collection techniques as spammers.
  Setup. Once they know which business to spoof and who their victims are, phishers create methods for delivering the message and collecting the data. Most often, this involves e-mail addresses and a Web page.
  Attack. This is the step people are most familiar with -- the phisher sends a phony message that appears to be from a reputable source.
  Collection. Phishers record the information victims enter into Web pages or popup windows.
  Identity Theft and Fraud. The phishers use the information they've gathered to make illegal purchases or otherwise commit fraud. As many as a fourth of the victims never fully recover


How to prevent phishing.
  1. Guard against spam
  2. Communicate personal information only via phoneor secure web sites.
  3. Do not click on links, download files or open attachments in emails from unknown senders
  4. Never email personal or financial information, even if you are close with the recipient.
  5. Beware of links in emails that ask for personal information
  6. Beware of pop-ups and follow these tips:

* Never enter personal information in a pop-up screen.

* Do not click on links in a pop-up screen.

* Do not copy web addresses into your browser from pop-ups.

* Legitimate enterprises should never ask you to submit personal information in pop-up screens, so don’t do it.
7.  Protect your computer with a firewall, spam filters, anti-virus and anti-spyware software
8.  Check your online accounts and bank statements regularly



reference:
http://en.wikipedia.org/wiki/Spam_%28electronic%29
http://en.wikipedia.org/wiki/Computer_virus
Oxford Advance Learning Dictionary
http://en.wikipedia.org/wiki/E-mail_spam
http://www.nolo.com/legal-encyclopedia/how-does-spam-work-30013.html
http://www.buzzle.com/articles/different-types-of-computer-viruses.html
http://antivirus-software.topchoicereviews.com/11-ways-prevent-computer-viruses_258.html
http://www.techsoup.org/learningcenter/internet/page4782.cfm
http://www.identitytheftkiller.com/prevent-phishing-scams.php
http://banking.about.com/od/securityandsafety/a/phishingscams.htm

No comments:

Post a Comment