Worm bait?

Johannes B. Ullrich jullrich at sans.org
Tue Aug 19 21:05:15 EDT 2003


> Terminology question.  What's a 'worm' vs. 'virus' vs. 'trojan horse'

Worm: self propagating malware which does not require user interaction
Virus: Malware that uses e-mail to propagate and usually requires at
least that you as a user load it into your MUA. Does not always require
'opening'. But for example, it will not propagate if you keep it sitting
on your mail server.
Trojan Horse: Program that escalates privilaeges by tricking a
privileged user into executing it.
Backdoor: non-standard remote admin method :-/
Bot: IRC controlled backdoor
Auto Rooter: software that uses an exploit and installs backdoor without
user interaction.

anyway. just a quick off the cuff list. not meant to be authoritative.



> etc.  Wouldn't the current spate of spam more properly be attributed to
> a virus?  Is there a strict definition for these things?  I know what
> /I/ think they mean, but I've seen these terms bandied about so loosly
> lately that I'm not sure if I'm crazy, or if everybody else is crazy.
-- 
SANS - Internet Storm Center
http://isc.sans.org
PGP Key: http://isc.sans.org/jullrich.txt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.blu.org/pipermail/discuss/attachments/20030819/ffe11833/attachment.sig>


More information about the Discuss mailing list