380 likes | 534 Vues
Protect Against Spywares – SpywareBlaster. Content. Introduction – - What is Spyware? - Danger - Sign of Trouble Solution Cleaning -- Spybot Protection -- SpywareBlaster Evaluation & Conclusion. Introduction.
E N D
Content • Introduction – - What is Spyware? - Danger - Sign of Trouble • Solution • Cleaning -- Spybot • Protection -- SpywareBlaster • Evaluation & Conclusion
Introduction • Prevention is better than cure – SpywareBlaster prevents the installations of spywares as well as the running of the installed spywares
What is spyware? • According to spywareinfo.com, spyware is software or hardware installed on a computer without the knowledge and the consent of the users. These components gather information about the user for later retrieval by whoever controls the spyware. • If the spywares aim at marketing some product or services, they are called adware.
Danger The threat can be categorized as follows:- Annoyance; profile users, fairly easy to remove Threat; profile users and broadcast data back to a server, removal is not easy Dangerous; logs activity, open communication ports, difficult to remove, may contain security flaw and/or anti-spy counter measures Extremely dangerous; logs activity, open communication ports, high possibility of potential system damage or security flaw, may attempt to disable anti-virus or firewall programs.
Sign of Trouble • System is slow • Mysterious new toolbar in browser • Advertising windows pop up even when not browsing the web • Surprise 900-number charges on phone bill
Solution Game plan:- - clean up the system (with Spybot) - take a snapshot of the system in its clean state - run SpywareBlaster to protect the system - periodically restore the system to its clean state to preserve integrity
Cleaning with Spybot • A free software from http://www.safer-networking.org/ to detect and remove spywares • Allow recovery • Provide immunization
The result is colour-coded • Red entries – problems that should be fixed to avoid security and/or privacy problems • Black entries – system internals, better remain untouched • Green entries -- indicate usage tracks, may be removed.
Remove the threats • Select Fix selected problems
II. Possible recovery • A list of back-ups is provided.
III. Immunization • To prevent future spyware installation
Protection -- SpywareBlaster • http://www.javacoolsoftware.com • SpywareBlaster creates a snapshot (an image of various browser and system settings) of the computer in its clean state. • Protect the system from installation of spywares and action of installed spywares by setting a “kill bit” for spyware ActiveX controls • Snapshot can be restored, changes and additions detected will be reported to provide full control
1. Creating a snapshot • Run SpywareBlaster. Select System Snapshotthen Create a System Snapshot • Choose a meaningful name for the snapshot such as after_cleaning, nothreat, and etc.
2. Protect the system • Current list of problematic spywares and tracking cookies is provided. The ones displayed in red are the one that the computer is not protected against. • User can choose the ones to be protected against. Press “Select All” or manually make the selection. • Press “Protect Against Checked Items” button.
Information about the spyware/cookies is available. Select More Info on Items
3. Restoring the system • Select System Snapshot choose Restore system Snapshot
4. Other options • Settings
Tools 1. Brower Pages – allow changes to the settings
Hosts Safe – Encrypted backup copies of the Hosts file. Can be restored by “Restore Saved Backup
3. Misc. Internet Explorer Settings – edit Internet Explorer settings
4. Flash Killer – Provides the option to set the kill bit for the Macromedia Flash control (versions 4.x, 5.x, or 6.x).
5. Custom Blocking – Allows customization of the list of ActiveX controls to be blocked.
Updates SpywareBlaster can be effective only if the threats are known, thus it is important to update the database frequently
Information on spyware/adware • Wilders.org http://www.wilders.org • SpywareInfo http://www.spywareinfo.com • Doxdesk.com http://www.doxdesk.com
Evaluation • SpywareBlaster can protect a system only if it is possible to reach the clean state, not contaminated by surveillance programs. • Spybot Search & Destroy was known to be unable to find and remove keyloggers.1
Conclusion • Spywares, or serveillance programs, remain a major security issue. They are capable of invading a computer system, tracks users’ keystrokes and thus gain control of the systems. • The Software principles Yielding Better Levels of Consumer Knowledge (SPYBLOCK) Act was introduced in US Congress. The act would make downloading and installing software without alerting the user illegal.2
Critics would like to add provision to provide avenue for the users to take legal actions against companies that create and use spywares. • The Federal Trade Commission plans a workshop on spyware in mid-April !!
References • Scott Spanbauer, “Fight Back Against Surveillance Software”, PC World Magazine, April 2004 issue (Posted Thursday, February 26, 2004). • Adrienne Newell, “Anti-Spyware Law Proposed”, Medill News Service, February 26, 2004