COMMON WEAKNESS ENUMERATIONIncomplete

CWE-507

Trojan Horse

The product appears to contain benign or useful functionality, but it also contains code that is hidden from normal operation that violates the intended security policy of the user or the system administrator.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product appears to contain benign or useful functionality, but it also contains code that is hidden from normal operation that violates the intended security policy of the user or the system administrator.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Distribution

Yaşam döngüsü evresi

Implementation

Yaşam döngüsü evresi

Operation

Risk

Başarılı sömürü neye yol açar?

Execute Unauthorized Code or Commands

Etkilenen güvenlik alanları: Confidentiality, Integrity, Availability

Savunma

Nasıl önlenir ve çözülür?

Operation

Operasyonel savunma

Detay
Most antivirus software scans for Trojan Horses.

Installation

Installation aşaması savunması

Detay
Verify the integrity of the product that is being installed.