29-10-2010, 04:12 PM
[attachment=7030]
The Dangers of Spyware
by André Post
Symantec Security Response
Abstract
Spyware programs are applications that send information via the Internet to the creator of the
spyware, or the publisher. Spyware usually consists of core functionality and functionality for
information gathering. The core functionality appeals to users and entices them to install and use the
spyware. The End User License Agreement (EULA) informs users of the information-gathering
actions, but most users overlook this information. Information that is sent to the publisher is normally
used for improved direct marketing purposes. The type of sent information differs depending on the
spyware program. In order for the publisher to properly digest the gathered data, some spyware
programs send a unique identifier with the gathered information.
Users often overlook the information-gathering functionaility of spyware, leaving them unaware that
the spyware publisher is gathering data from their computers.
√ About spyware
In this paper, spyware programs are defined as applications that send information via the Internet to
the publishers for marketing purposes without obvious notification to users. In this paper, spyware
does not refer to Backdoor Trojan Horses that allow hackers to secretly gain information from
the computer. The type of gathered information differs depending on the spyware. Some spyware
sends only system-specific information; other spyware sends personal information including
browsing habits.
Most spyware programs are free programs that are available on the Internet, and in some cases are
useful tools. Some examples are:
• Download utilities
• Games
• Media players
• Accounting software
The Dangers of Spyware
by André Post
Symantec Security Response
Abstract
Spyware programs are applications that send information via the Internet to the creator of the
spyware, or the publisher. Spyware usually consists of core functionality and functionality for
information gathering. The core functionality appeals to users and entices them to install and use the
spyware. The End User License Agreement (EULA) informs users of the information-gathering
actions, but most users overlook this information. Information that is sent to the publisher is normally
used for improved direct marketing purposes. The type of sent information differs depending on the
spyware program. In order for the publisher to properly digest the gathered data, some spyware
programs send a unique identifier with the gathered information.
Users often overlook the information-gathering functionaility of spyware, leaving them unaware that
the spyware publisher is gathering data from their computers.
√ About spyware
In this paper, spyware programs are defined as applications that send information via the Internet to
the publishers for marketing purposes without obvious notification to users. In this paper, spyware
does not refer to Backdoor Trojan Horses that allow hackers to secretly gain information from
the computer. The type of gathered information differs depending on the spyware. Some spyware
sends only system-specific information; other spyware sends personal information including
browsing habits.
Most spyware programs are free programs that are available on the Internet, and in some cases are
useful tools. Some examples are:
• Download utilities
• Games
• Media players
• Accounting software
