問58
頻出度★★★
スパイウェアの説明はどれか。
平成29年度 春期 ITパスポート試験 問58
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 58
Incorrectア
“A scam that demands payment merely for viewing a website or clicking on an image” describes one-click fraud (one-click ware). It is a scheme for swindling money and is a different thing from spyware, which is a program that collects information.
Incorrectイ
“A mechanism that packages and hides attack tools such as log erasure and backdoors” describes a rootkit. It is a set of tools used after intrusion to hide traces and maintain administrator privileges, which differs from spyware, whose main purpose is collecting information.
Incorrectウ
“A program that infects many PCs and, following instructions sent over a network, illicitly controls them to carry out coordinated attacks and the like” is a bot. It remotely controls the group of infected PCs (a botnet) to launch attacks such as DDoS, so its purpose differs from that of spyware, which collects information.
- エ
正解 Choice エ is correct. Spyware is a program that is installed on a PC or similar device without the user noticing, secretly collects information such as the user’s personal data, web browsing history, and typed input, and sends it to an external party. Choice エ, “a program that is installed without the user’s awareness and collects information such as the user’s personal data and access history,” states exactly this definition, so it correctly describes spyware.
ここがポイント
- Spyware = a program that is installed without the user noticing and secretly collects and sends out personal data, access history, and the like.
- Distinguish similar malware by purpose: one-click fraud (demanding money), rootkit (hiding intrusion traces and maintaining privileges), and bot (coordinated attacks via remote control).
用語