GraywareAnewthreatofcomputersecurity.pptVIP

Fortinet Confidential Authored by Philip Kwan 一些常见的现象Common Characteristics 浏览器默认主页被修改,收藏夹里多了一些陌生的网址 Default main page of Internet browser being modified. It contains unrecognized URLs. 浏览器的工具栏上多了一些工具条和各种按钮 Browser’s toolbar has more tool menus and buttons 系统经常会弹出一些广告页面 不知何时, 系统被安装了一些未知的软件 Unidentified software installed on the system 一些软件是不必要的, 但是不知怎样去卸载 Unnecessary software installed but cannot uninstall them easily 系统中存在着较多的未知进程 System displays many unidentified processes 系统的性能越来越低,变得不太稳定 System is slow and becomes unstable 为什么叫灰色软件(Grayware)?Why The Name Grayware? 这些软件通常都有一些有用的功能 They are usually some sort of software utilities or tools 它们通常也包含一些对用户来说不必要的行为 They comprise of some actions that are unnecessary to the users 它们通常被一些公司在网站上公开发布 They are usually distributed online by some companies 它们的一些行为在法律上处于灰色区域 Their behaviors whether being lawful lie in the gray area 灰色软件(Grayware)和恶意软件(Malware)有什么不同?What Are The Differences Between Grayware And Malware? 软件发布者 Software Distributors 恶意软件(Malware) Malware 发布者一般是个人 Distributors are usually individuals 发布者一般是未知的 Distributors are unknown 灰色软件(Grayware) Grayware 发布者一般是公司 Distributors are usually companies 发布者一般是公开的 Distributors identities are known 灰色软件(Grayware)和恶意软件(Malware)有什么不同? What Are The Differences Between Grayware And Malware? 发行目的 The Intention of Distribution 恶意软件(Malware) Malware 破坏或控制用户的系统 To disrupt or control systems 窃取用户的重要信息(如口令) To steal information from users (e.g. passwords) 炫耀作者的计算机技能 To boast author’s computing skills and knowledge … 灰色软件(Grayware) Grayware 争取更多的用户资源 To attain more resources from users 收集用户信息 To collect more information of users 发布商业广告 To advertise … 灰色软件(Grayware)和恶意软件(Malware)有什么不同? What Are The Differences Between Grayware And Malware? 发布方式 Distribution Methods 恶意软件(Malware) Malware 自动感染其它文件 Infect other files 通过电子邮件, 即时通讯工具,系统漏洞在网络间自动传播 Propagate through emails, communication software, system vulnerabilities 伪装成一些常用软件欺骗用户主动安装 Disguised as common software utilities … 灰色软件