Computer worm

Computer Worm

Definition:

A worm is a malicious program that originates on a single computer and searches for other computers connected through a local area network (LAN) or Internet connection. When a worm finds another computer, it replicates itself onto that computer and continues to look for other connected computers on which to replicate. A worm continues to attempt to replicate itself indefinitely or until a self-timing mechanism halts the process. Unlike a virus, it does not need to attach itself to an existing program. Worms usually cause harm to the network, if only by consuming bandwidth, whereas viruses usually corrupt or modify files on a targeted computer.

How to handle:

Worms spread by exploiting vulnerabilities in operating systems. All vendors supply regular security updates (see “Patch Tuesday”), and if these are installed to a machine then the majority of worms are unable to spread to it. If a vendor acknowledges a vulnerability but has yet to release a security update to patch it, a zero day exploit is possible. However, these are relatively rare.

Anti-virus and anti-spyware software are helpful, but must be kept up-to-date with new pattern files at least every few days. The use of a firewall is also recommended.

Common anti-worm: (check the anti-virus and anti-spyware post)

Resource:

http://en.wikipedia.org/wiki/Computer_worm

Other various resources found from the internet

~ by Pandu on May 5, 2008.

Leave a Reply