ANITVIRUSES TECHNIQUES COMPUTER VIRUSES AND ANITVIRUSES TECHNIQUES 1

SEQUENCE OF PRESENTATION * WHAT IS COMPUTER VIRUS ? 4

SEQUENCE OF PRESENTATION COMPUTER VIRUS * VIRUS (ROGUE SOFTWARE) I 2

SEQUENCE OF PRESENTATION * WHO ARE ROGUE PROGRAMMERS ? COMPUTER VIRUS * WHO ARE ROGUE PROGRAMMERS ? 3

SEQUENCE OF PRESENTATION * TYPES OF COMPUTER VIRUS 5

SEQUENCE OF PRESENTATION COMPUTER VIRUS * WHAT ALL CAN THEY DO ? 6

SEQUENCE OF PRESENTATION COMPUTER VIRUS * HOW DO THEY INFECT ? 7

SEQUENCE OF PRESENTATION COMPUTER VIRUS * HOW NOTICE ? V I S R U 8

SEQUENCE OF PRESENTATION COMPUTER VIRUS * WHAT TO DO ? NO ! VIRUS 9

SEQUENCE OF PRESENTATION COMPUTER VIRUS * LAST WORD 10

SEQUENCE OF PRESENTATION COMPUTER VIRUS * CONCLUSION 11

“ A COMPUTER PROGRAM ABLE TO INFECT OTHER PROGRAMS BY WHAT IS COMPUTER VIRUS ? COMPUTER VIRUS “ A COMPUTER PROGRAM ABLE TO INFECT OTHER PROGRAMS BY MODIFYING THEM TO INCLUDE A POSSIBLY EVOLVED VERSION OF ITSELF. ” 12

WHAT IS COMPUTER VIRUS ? * BE A SET OF COMPUTER INSTRUCTIONS * BE DELIBERATELY CREATED * DO UNDESIRABLE THINGS (DAMAGES) * PROPAGATE USING HOST PROGRAMS 13

COMPUTER COMPONENTS SOFTWARE ROGUE SOFTWARE LEGITIMATESOFTWARE COMPUTER VIRUS SOFTWARE ROGUE SOFTWARE LEGITIMATESOFTWARE PRODUCTIVE DESTRUCTIVE 1

ROGUE SOFTWARE * BUG-WARE - NOT MEANT FOR DESTRUCTION * THE TROJAN HORSE - APPEARS TO BE USEFUL * WORMS - TRAVEL IN NETWORK * REPLICATORS - COPY ITSELF TO EXHAUST DISK * CHAMELEONS - M ISCHIEF

ROGUE SOFTWARE * TIME BOMBS - EXPLODE ON TIME / DATE * LOGIC BOMBS - EXPLODE ON LOGIC * SOFTWARE BOMBS - EXPLODE ON LAUNCH

WHO ARE ROUGE PROGRAMERS ? COMPUTER VIRUS * PSYCHO CASES - FOR FUN - RELEASE ANGER - TAKE REVENGE 2

WHO ARE ROUGE PROGRAMERS ? COMPUTER VIRUS * PROFIT EARNERS $ $ $ $ $ - VIRUS / ANTIVIRUS MARKET

WHO ARE ROUGE PROGRAMERS ? COMPUTER VIRUS * INFO ATTACKERS - DISRUPT ENEMY’S INFORMATION & NETWORK

TYPES OF COMPUTER VIRUS * BOOT / PARTITION INFECTING VIRUS * EXECUTABLE FILE INFECTING VIRUS * MULTI-PART VIRUS * DIRECTORY INFECTING VIRUS RESIDENT NON RESIDENT 3

WHAT CAN THEY DO ? FORMAT DISK COPY, RENAME AND DELETE FILES COMPUTER VIRUS FORMAT DISK COPY, RENAME AND DELETE FILES COPY THEMSELVES WITH NEW CONFIGURATION INFORMATION MODIFY FILE DATES AND EXTENSIONS CALL OTHER COMPUTERS TO UPLOAD AND DOWN LOAD FILES 4

HOW DO THEY DO ? APPENDING INSERTION INTERCEPTION REDIRECTION COMPUTER VIRUS APPENDING INSERTION INTERCEPTION REDIRECTION REPLACEMENT 5

HOW DO YOU NOTICE ? COMPUTER VIRUS 6

HOW DO YOU NOTICE ? COMPUTER OPERATION BECOMES SLUGGISH COMPUTER VIRUS COMPUTER OPERATION BECOMES SLUGGISH PROGRAMS TAKE LONGER TO LOAD PROGRAMS ACCESS MULTIPLE DISK DRIVES UNUSUAL AND FREQUENT ACCESS TO DISK DISK SPACE DECREASES RAPIDLY BAD DISK SECTORS STEADILY INCREASE RAM DECREASES SUDDENLY OR STEADILY COMPUTER HALTS WITH OR WITHOUT FUNNY MESSAGES

HOW DO YOU NOTICE ? PROGRAMS ENCOUNTER ERRORS COMPUTER VIRUS PROGRAMS ENCOUNTER ERRORS PROGRAMS GENERATE UNDOCUMENTED ERRORS FILES REPLACED WITH GARBAGE FILES MYSTERIOUSLY DISAPPEAR FILE ATTRIBUTES AND DATA CHANGE DATA FILES OR DIRECTORIES OF UNKNOWN ORIGIN APPEAR 7

WHAT TO DO ? ANTI VIRUS TECHNIQUES

WHAT TO DO ? SAFE COMPUTING METHODS ANTIVIRUS SOFTWARE SYSTEMS COMPUTER ANTI VIRUS SAFE COMPUTING METHODS ANTIVIRUS SOFTWARE SYSTEMS PREVENTION SYSTEM DETECTION SYSTEM SURGICAL APPROACH 8

SAFE COMPUTING METHODS WHAT TO DO ? COMPUTER ANTI VIRUS SAFE COMPUTING METHODS * YOU MUST - BOOT FROM FLOPPY DISK - DISCOURAGE PIRATED SOFTWARE - TAKE BACKUP 9

SAFE COMPUTING METHODS WHAT TO DO ? COMPUTER ANTI VIRUS SAFE COMPUTING METHODS YOU MAY USE PRE RUN CHECKUPS CHANGE FILE ATTRIBUTES REINITIALIZE SYSTEM REINSTALL APPLICATIONS REFORMAT HARD DISK OBSERVE OPERATION TIMINGS LOG DISK SPACE LOG BAD SECTORS 10

WHAT TO DO ? ANTIVIRUS SOFTWARE SYSTEMS PREVENTION SYSTEMS COMPUTER ANTI VIRUS ANTIVIRUS SOFTWARE SYSTEMS PREVENTION SYSTEMS TO STOP VIRUS ATTACKS IN REAL TIME BLOCK ILLEGAL DISK ACCESS AND PROGRAM LOADING PASSWORD PROTECTION SLOW SPEED UNNECESSARY INTERRUPTS CAN BE INFECTED BY VIRUS HEAVY ON RAM 11

WHAT TO DO ? DETECTION SYSTEMS ANTIVIRUS SOFTWARE SYSTEMS COMPUTER ANTI VIRUS ANTIVIRUS SOFTWARE SYSTEMS DETECTION SYSTEMS LOAD, RUN AND EXIT CHECK PROGRAM BEFORE EXECUTION COMPLEMENT PREVENTION SYSTEM PROGRAM SPECIFIC AND GENERIC 12

FILE COMPARISON UTILITIES VIRUS SCANNERS DISK MAPPERS WHAT TO DO ? SOME ANTIVIRUS SOFTWARE COMPUTER ANTI VIRUS VACCINES ANTIDOTES FILE COMPARISON UTILITIES VIRUS SCANNERS DISK MAPPERS MEMORY RESIDENT ANTIVIRUS PROGRAMS

WHAT TO DO ? THE IDEAL ANTIVIRUS SAFETY NET CONSISTS OF AN INTELLIGENT, WELL TESTED AND WELL BALANCED COMBINATION OF SAFE COMPUTING METHODS PLUS VIRUS PREVENTION AND VIRUS DETECTION SYSTEMS 14

Empty the House - TAKE OUT ALL HOUSE HOLD ITEMS SURGICAL APPROACH Empty the House - TAKE OUT ALL HOUSE HOLD ITEMS DISINFECT THE EMPTY HOUSE CLEAN AND DISINFECT EACH HOUSE HOLD ITEM AND BRING IT BACK ONE BY ONE START NORMAL LIFE 17

THE LAST WORD “THE ONLY TRULY SECURE SYSTEM IS ONE THAT IS POWERED OFF, CAST IN A BLOCK OF CONCRETE, AND SEALED IN A LEAD-LINED ROOM WITH ARMED GUARDS AND EVEN THEN I HAVE MY DOUBTS.” E. H. SPAFFORD ASSOCIATE PROFESSOR DEPTT OF COMPUTER SCIENCES PURDUE UNIVERSITY 19

CONCLUSION “LEARN TO LIVE WITH IT” SAFE COMPUTING TECHNIQUES MANAGE SOFTWARE PIRACY EDUCATE USERS KEEP ABREAST OF THE LATEST VIRUS AND ANTIVIRUS REVIEW SITUATION 20