Think about it. If somebody is
able to see a recording of all the keys someone has punched in
a work session, there??™s really no sanctuary. All the information
that went through the keyboard will be disclosed, no matter
how sophisticated the transport and processing phases are.
Falling victim to a keylogger is as easy as getting a virus or a
worm; however, for being truly useful, this malware needs to
have some Trojan traits, too. The list of recorded key strokes is
still on the victim??™s PC, and an attacker needs to put his fangs in
it to take advantage of the information. This can be done by
listening to some external command, such as a Trojan, or by
sending mail to a predetermined address. Both operations are
dangerous because they may allow a good forensic analyst to
trace them back to the attacker. There are other ways of tracing
key strokes, including concealing mini cameras at ATMs and
looking at your neighbor on the plane as he types on his keyboard.
Installing a keylogger is hard work. Antivirus products, hardening,
and basic computer hygiene do a decent job in keeping
those threats from in?¬‚ationary growth. It turns out that instead of
concentrating on the few feet between the keyboard and the
motherboard, it pays much better to focus on what lies in the
few inches between the user??™s ears: his brain.
Pages:
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56