COMMON WEAKNESS ENUMERATIONIncomplete

CWE-507

Trojan Horse

The product appears to contain benign or useful functionality, but it also contains code that is hidden from normal operation that violates the intended security policy of the user or the system administrator.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The product appears to contain benign or useful functionality, but it also contains code that is hidden from normal operation that violates the intended security policy of the user or the system administrator.

Root cause

How and when does the problem arise?

Lifecycle phase

Distribution

Lifecycle phase

Implementation

Lifecycle phase

Operation

Risk

What does successful exploitation lead to?

Execute Unauthorized Code or Commands

Affected security scopes: Confidentiality, Integrity, Availability

Defence

How is it prevented and fixed?

Operation

Operational defence

Detail
Most antivirus software scans for Trojan Horses.

Installation

Installation aşaması savunması

Detail
Verify the integrity of the product that is being installed.