問66
頻出度★★★
スパイウェアが目的としている動作の説明として, 最も適切なものはどれか。
平成27年度 春期 ITパスポート試験 問66
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 66
Incorrectア
Making the OS or software run unstably describes viruses or worms that aim to destroy or disrupt the system. For spyware, staying unnoticed is what matters, so making the system unstable and thereby revealing its presence works against its purpose.
Incorrectイ
Deleting files without permission is the behavior of viruses and the like that aim to destroy data. The purpose of spyware is to take information out; making the user notice something is wrong by erasing files is not its aim.
Incorrectウ
Hijacking the browser to force specific behavior (such as changing the home page without permission or displaying ads) describes a different kind of malware called a browser hijacker or adware. Its main purpose is forced behavior that appears on the surface, which differs from spyware that gathers information in secret.
- エ
正解 Spyware is malware that sneaks into a computer without the user noticing, collects information such as entered personal data, IDs and passwords, browsing history, and keystrokes, and secretly sends it to an outside attacker. As the name «spy» suggests, it does not carry out conspicuous destructive activity; gathering information is itself the goal, so エ is the most appropriate choice. It is hard to notice the infection, so the damage tends to continue for a long time.
ここがポイント
- Spyware = malware that hides without the user noticing, collects personal information, operation history, and so on, and sends it outside. «Stealing information in secret» is the core of the definition.
- Memorize malware sorted by purpose: destruction and spreading infection (virus / worm), information gathering (spyware / keylogger), displaying ads or altering the browser (adware / browser hijacker), and demanding a ransom (ransomware).
用語