| Community Intelligence |
A network of LinkScanner users who allow information about attempted exploitation of their computers to be transferred to Exploit Prevention Labs as part of the Intelligence Network. |
| Correlation Engine |
Aggregates intelligence from the Community Intelligence and Exploit Intelligence networks and the Reputation Filter, assembles it in real time and distributes it to LinkScanner users. |
| Crimeware |
Exploits and other malware programs that seek to extort money or other assets with portable value from the owner or user of an unpatched computer on behalf of a third party. |
| Drive-by Download |
The downloading of one or more malware programs triggered by a user simply visiting a particular website; the user has no knowledge of the download taking place. |
| Exploit |
A program that takes advantage of a risk window to take control of, damage, or remove information from an unpatched computer. |
| Exploit Distributor |
A web page, usually displaying seemingly innocuous content, which also contains exploit code and is used to deliver drive-by downloads. Operators of Exploit Distributor pages are often paid a commission by the operator of the exploit server for each download they deliver. |
| Exploit Intelligence |
An extended network of human researchers and automated probes, honeypots, and search bots focused on discovering new vulnerabilities and exploit examples for the purpose of preventing them from accessing users' computers. |
| Exploit Prevention Labs |
The developer of the LinkScanner software and its associated Intelligence Network. |
| Exploit Server |
A server operated by a developer or owner of exploit code for the sole purpose of distributing that exploit to a wide audience, usually via a network of exploit distributors. |
| Intelligence Network |
Exploit Prevention Labs' patent-pending combination of research techniques comprising the Community Intelligence and Exploit Intelligence networks, the Reputation Filter, and the Correlation Engine used by LinkScanner to protect computers. |
| Keyloggers |
A malware program that captures all keystrokes entered on a computer keyboard and delivers them to a third party; keyloggers are often, but not always, used by exploits and other crimeware. |
| Malicious Site |
A malicious site is any website to overtly or (more often) covertly deliver malware to a user's computer, usually by means of a drive-by download through the user's browser or a phishing attempt through the users email client. |
| Malware |
Malware is an umbrella term used to describe any software program designed to have a negative or destructive effect (payload). Malware includes viruses, worms, Trojan horses, spyware, adware, rootkits, and keyloggers, as well as more generic labels such as crimeware and exploits which may comprise several types of malware. |
| Reputation Filter |
Exploit Prevention Labs' proprietary technology which creates an intelligent filter for known and suspected exploit distributor sites. |
| Risk Window |
The period of time between the announcement of a vulnerability and the provision of a patch by the vendor. The average length of a risk window is currently 56 days. |
| Rootkits |
A set of software tools intended to conceal running processes, files or system data, which helps an intruder maintain access to a system without the user's knowledge, often via some kind of "back door" into the system. Rootkits are most frequently distributed via drive-by download and require high levels of technical expertise to remove safely. |
| Socket |
A socket in the context of Internet security is the standard application programming interface (API) for sending and receiving data across the Internet, making it the point of entry into a user's system for any downloaded code. |
| Vulnerability |
A weakness in an operating system or application that can be exploited by hackers and other criminals to distribute crimeware. |