Computer Security Glossary
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
adware
A program that secretly gathers personal information through the Internet and relays it back to another computer. This is done by tracking browsing habits, generally for advertising purposes. This kind of software can be unknowingly downloaded from Web sites (typically in shareware or freeware), email messages, and instant messages. Often a user unknowingly downloads adware by accepting an End User License Agreement from a software program.
cookie
A small file that a Web site saves to a local computer. After a cookie is saved locally, when the Web site is revisited, it checks to see if there’s a cookie in the computer. From the information in the cookie, the site deduces the identity of the computer accessing the Web site, enabling it to present customized content to match user preferences.
crimeware
Cybercrime, sometimes referred to as crimeware, involves a wide range of malicious or potentially malicious software. Crimeware is software that is used to commit a criminal act.
cybercrime
Any crime that is committed using a computer, network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime.
emerging threats
Security threats that can be unknowingly downloaded from Web sites, email messages, or instant messenger programs, including:
- Dialers, which use a system without user permission or knowledge to dial out through the Internet to a 900 number or FTP site, typically to accrue charges
- Joke programs, which change or interrupt the normal behavior of a computer (for example, swapping functionality of the mouse buttons)
- Remote access programs, which allow access over the Internet from another computer to gain information or to attack or alter a computer
- Hack tools, which can be used by a hacker to gain unauthorized access to a computer - one type of hack tool is a keystroke logger, which is a program that tracks and records individual keystrokes and can send this information back to the hacker
hacker
Initially defined as a proficient or clever programmer, today a hacker is commonly meant to describe someone who compromises security or breaks into a computer system. It is often either implied or clearly stated that this activity is one of a harmful or malicious nature.
identity theft
The act of stealing and assuming another person’s identity in order to commit fraud or other crimes.
macro
A simple software program that can be started by a specific keystroke or a series of keystrokes. Macros can be used to automate repetitive tasks and are often stored in documents and executed by programs such as Microsoft Word and Excel.
macro virus
A malicious macro program that is designed to replicate itself from file to file and can often destroy or change data. Macro viruses can be transferred across platforms and spread whenever an infected file is opened.
mobile code
A Web-based application (usually in the form of a Java™ applet, Visual Basic script, or ActiveX control) that is generally intended to enhance the appeal, usability, or interactivity of a Web page. Such applications can be as “ornamental” as spinning icons on a Web page or as integral as the script that enables you to fill out and submit forms. Because these are actual pieces of computer code that automatically execute when Web pages are downloaded, they can be exploited to deliver malicious “payloads.”
online fraud
Any type of fraud that uses email, Web sites, chat rooms, or message boards. These vehicles are used to present fraudulent solicitations to potential victims, conduct fraudulent transactions, or transmit stolen money to financial institutions or others connected with the crime.
online transaction security
The security measures available to protect consumers at the time they are most vulnerable to criminals and hackers—when browsing, shopping, or banking online and when about to submit passwords, account numbers, or other confidential information.
pharming
An attempt to defraud Internet surfers by hijacking a Web site’s domain name or URL and redirecting users to an imposter site, where requests for information are made.
phishing
An attempt to mislead people into divulging confidential information, such as Social Security Numbers and passwords. Typically uses legitimate-looking email or instant messages in combination with imposter Web sites to make fraudulent requests for information (that is, to go “fishing” for data).
spyware
A stand-alone program that can secretly monitor system activity and detect information such as passwords and other confidential information and relay the information back to another computer. Spyware can be unknowingly downloaded from Web sites (typically in shareware or freeware), email messages, and instant messenger programs. Often a user unknowingly downloads spyware by accepting an End User License Agreement from a software program.
stealth
- A specific type of computer virus that evades common detection methods.
- A state of a computer or network port that is invisible to hacking programs.
Trojan horse
A program containing malicious code that is disguised as or hides in something benign, such as a game or utility.
wild virus
A virus found outside of research labs that has infected at least one standard user not associated with the antivirus industry. These viruses spread as a result of normal day-to-day operations and are the top priority of Symantec Security Response.
worm
A program that replicates without infecting other programs. Some worms spread by copying themselves from disk to disk, while others replicate only in memory to slow down a computer.

