August 2004 — Features

Print this article | Email this article

Click here to receive your FREE subscription to T.H.E. Journal

Unmasking Spyware

By Kelly Martin, Symantec Corp.

Prevention and Control

While spyware is an increasingly serious threat to the confidentiality of business and personal information, users can minimize their risk of falling victim to this clandestine code by leveraging security technology together with best practices for more protected computing. To help prevent the unwanted downloading of spyware, or to control spyware that is already on a computer, the following steps are recommended:

  1. Update personal or business information security policies to allow only trusted software to download over the Internet. Before performing any online software installs, investigate the software by visiting the vendor's Web site and reading product reviews by known, reputable test sources. Many of today's most highly regarded technology publications also provide regular product comparisons and reviews conducted by known experts.
  2. Use anti-virus software with expanded threat detection capabilities. A growing number of leading anti-virus vendors provide technology that identifies spyware, adware, keystroke loggers and other malicious code.
  3. Read end-user license agreements carefully before agreeing to their terms. In addition, be aware that the agreements for some freeware and shareware programs may contain such unclear language that it is virtually impossible to discern whether the programs in question include some sort of spyware or adware.
  4. Keep track of and remove unwanted ActiveX controls (Microsoft's answer to Java applets) and cookies that have been installed on a PC. Some spyware and adware vendors use ActiveX controls to enable their software to be installed from partner Web sites. Spyware and adware programs also frequently use cookies to track users' Web surfing habits, capture user information and more. Deleting ActiveX controls and cookies will not uninstall a spyware program, but it will likely hamper the effectiveness of the malicious code.

Security Terms to Know

Spyware — Stand-alone programs that can secretly monitor system activity. These may detect passwords or other confidential information and transmit them to another computer.

Adware — Programs that secretly gather personal information through the Internet and relay it back to another computer, generally for advertising purposes. This is often accomplished by tracking information related to Internet browser usage or habits.

For more information on spyware, adware and other security threats, visit Symantec online at www.symantec.com.

Cite this Site

Kelly Martin, Symantec Corp., "Unmasking Spyware," T.H.E. Journal, 8/1/2004, http://www.thejournal.com/articles/16868

copy text (above) for proper citation