Non-Replicating Malicious Code

Opis

Non-replicating malicious code only resides on the target system or product that is attacked; it does not attempt to spread to other systems.

Skutki

• Confidentiality, Integrity, Availability

  Execute Unauthorized Code or Commands

Zapobieganie

• Operation

  Antivirus software can help mitigate known malicious code.

• Installation

  Verify the integrity of the software that is being installed.

Słabość nadrzędna

• CWE-507 Trojan Horse

Kiedy powstaje

• Distribution
• Implementation
• Operation

Dotyczy

Not Language-Specific

Uwagi

It is suspected that malicious code can often be characterized using other "regular" weaknesses related to insecure behavior. However, this has not been closely investigated.

Źródła

1. A Taxonomy of Computer Program Security Flaws, with Examples — Carl E. Landwehr, Alan R. Bull, John P. McDermott, William S. Choi, 1993