Internet Security Software - Computer Security Software - Security Software
Software Security Solutions background
 
 

mountains

LinkScanner Resource Center

 

Exploit Prevention Labs Glossary of Exploit-Related Security Terms

As with every new security threat, zero-day exploits come with their own new vocabulary. As there are so many new threats, and the terminology used to describe them is so fluid, we thought it would be helpful to lay out exactly what we mean when we use certain specific terms to describe aspects of the zero-day threat and our solution.

Community Intelligence A network of LinkScanner users who allow information about attempted exploitation of their computers to be transferred to Exploit Prevention Labs as part of the Intelligence Network.
Correlation Engine Aggregates intelligence from the Community Intelligence and Exploit Intelligence networks and the Reputation Filter, assembles it in real time and distributes it to LinkScanner users.
Crimeware Exploits and other malware programs that seek to extort money or other assets with portable value from the owner or user of an unpatched computer on behalf of a third party.
Drive-by Download The downloading of one or more malware programs triggered by a user simply visiting a particular website; the user has no knowledge of the download taking place.
Exploit A program that takes advantage of a risk window to take control of, damage, or remove information from an unpatched computer.
Exploit Distributor A web page, usually displaying seemingly innocuous content, which also contains exploit code and is used to deliver drive-by downloads. Operators of Exploit Distributor pages are often paid a commission by the operator of the exploit server for each download they deliver.
Exploit Intelligence An extended network of human researchers and automated probes, honeypots, and search bots focused on discovering new vulnerabilities and exploit examples for the purpose of preventing them from accessing users' computers.
Exploit Prevention Labs The developer of the LinkScanner software and its associated Intelligence Network.
Exploit Server A server operated by a developer or owner of exploit code for the sole purpose of distributing that exploit to a wide audience, usually via a network of exploit distributors.
Intelligence Network Exploit Prevention Labs' patent-pending combination of research techniques comprising the Community Intelligence and Exploit Intelligence networks, the Reputation Filter, and the Correlation Engine used by LinkScanner to protect computers.
Keyloggers A malware program that captures all keystrokes entered on a computer keyboard and delivers them to a third party; keyloggers are often, but not always, used by exploits and other crimeware.
Malicious Site A malicious site is any website to overtly or (more often) covertly deliver malware to a user's computer, usually by means of a drive-by download through the user's browser or a phishing attempt through the users email client.
Malware Malware is an umbrella term used to describe any software program designed to have a negative or destructive effect (payload). Malware includes viruses, worms, Trojan horses, spyware, adware, rootkits, and keyloggers, as well as more generic labels such as crimeware and exploits which may comprise several types of malware.
Reputation Filter Exploit Prevention Labs' proprietary technology which creates an intelligent filter for known and suspected exploit distributor sites.
Risk Window The period of time between the announcement of a vulnerability and the provision of a patch by the vendor. The average length of a risk window is currently 56 days.
Rootkits A set of software tools intended to conceal running processes, files or system data, which helps an intruder maintain access to a system without the user's knowledge, often via some kind of "back door" into the system. Rootkits are most frequently distributed via drive-by download and require high levels of technical expertise to remove safely.
Socket A socket in the context of Internet security is the standard application programming interface (API) for sending and receiving data across the Internet, making it the point of entry into a user's system for any downloaded code.
Vulnerability A weakness in an operating system or application that can be exploited by hackers and other criminals to distribute crimeware.

 

Anti Virus Software | Eset NOD32 | Kaspersky | Eset Smart Security | Spyware Removal Software | Spysweeper
Remove Adware |LinkScanner | LinkScanner Online | Firewalls | Outpost | SonicWALL | Disaster Recovery
Spam Blocker
| Security Tools | Computer Security Tips | Layered Security Model | Security Software Resources
Solution Certifications | Trusted Reviews | Security Goal | Security Links
Partners | Press Releases | White Papers | About Us Home


Contact Software Security Solutions at (303) 232-9070
Site Map | Privacy Policy | Legal Notice | Home

© 2008 Software Security Solutions. All rights reserved.