Cryptovirology: extortion-based security threats and countermeasures

摘要: Traditionally, cryptography and its applications are defensive in nature, provide privacy, authentication, security to users. In this paper we present the idea of ``Cryptovirology'' which employs a twist on cryptography, showing that it can also be used offensively. By being offensive mean mount extortion based attacks cause loss access information, confidentiality, information leakage, tasks typically prevents. analyze potential threats rogue use when combined with software (viruses, Trojan horses), demonstrate them experimentally by presenting an implementation ``cryptovirus'' have tested (we took careful precautions process insure virus remained contained). Public-key is essential (which call "cryptovirological attacks''). We suggest countermeasures mechanisms cope prevent such attacks. These implications how cryptographic tools should managed audited general purpose computing environments, imply well controlled. The experimental demonstrates packages condensed into small space, may independent (e.g., module design mobile devices).