Device Vulnerabilities and Attacks
Introduced| English |
|---|
| embedded computer/emˈbedɪd kəmˈpjuːtə/ |
| Internet of Things/ˈɪntənet ɒv θɪŋz/ |
| virus/ˈvaɪrəs/ |
| worm/wɜːm/ |
| ransomware/ˈrænsəmweə/ |
| remote access trojan/rɪˈməʊt ˈækses ˈtrəʊdʒn/ |
| unpatched software/ʌnˈpætʃt ˈsɒftweə/ |
Kinds of device
- A device is any computer: server, laptop, phone, or embedded computer 嵌入式计算机.
- Everyday embedded devices are Internet of Things (IoT) 物联网 devices.
- IoT runs everything from water pumps to washing machines.
Types of malware
- A virus 病毒 needs a user to open a file; a worm 蠕虫 spreads by itself.
- Ransomware 勒索软件 encrypts your files for money; a rootkit hides in the OS.
- A remote access trojan (RAT) 远程访问木马 gives remote control.
Name the malware from its behaviour
A worm self-spreads; a virus needs a user; ransomware encrypts for money; a rootkit hides.
Which malware spreads WITHOUT any user action?
A worm self-spreads; a virus needs a user.
Malware that encrypts your files and demands payment is...
Ransomware encrypts for money.
Software with no recent security update installed is called ____ software.
Unpatched software has open, known holes.
Which malware behaviours match their names? (Choose all)
A worm self-spreads; it does NOT need a user.
Rating device risk
- Adversaries exploit unpatched software 未打补丁的软件 and weak passwords.
- High: an unpatched server with a critical flaw.
- Low: a laptop with one unused open port.
Do not confuse a virus with a worm. A virus needs a person to run an infected file; a worm spreads on its own with no human action. The self-spreading is exactly what makes worms so dangerous.
An internet-connected thermostat is an example of an IoT device.
Everyday embedded devices are IoT.
Ransomware locks a hospital's files and demands payment for the decryption key. Because patient care depends on those files, availability is destroyed — this is why an unpatched hospital server is rated a high risk.
A device is any computer, including IoT. Learn malware by its trait: virus needs a user, worm self-spreads, ransomware encrypts for money, rootkit hides. Rate risk high for an unpatched critical device, low for a low-value one.