A security hole, also generally referred to as a computer vulnerability, is a flaw or susceptibility in a system that can be exploited. If discovered, security holes are gateways for hackers to install malicious software and possibly initiate a zero day attack if not discovered and patched by the vendor. A vulnerability can exist if the system has a security flaw, an attacker has access to the flaw, and the attacker has the capability to exploit the flaw. This security hole can also be known as the attack surface. The time period from when a security hole is introduced to when either access was removed, a security fix was implemented, or the attacker was thwarted is known as the window of vulnerability. Security holes can be found in all software and in order to plug these holes, software developers issue security updates, also known as “fixes” or “patches,” in order to immediately repair the problem. Unfortunately, cybercriminals can also reverse engineer these patches to discover what the vulnerability of the system was and create exploits from the intended solution. In order to keep security holes to a minimum on your own system, it is a good idea to keep all of your software up to date either by clicking the “check for updates” button or setting your software to automatically check for updates regularly, if available.
-
Recent Posts
Recent Comments
- dorrie on Bin Laden Story Brings an Abundance of Malware
- Sean Young on Warning: New rogue antivirus – ThinkPoint
- PC Tools on Top 5 Fake Security Applications in the 1st Quarter of 2011
- Mr Zoolook on The FBI and the Case of the YouTube Crazy
- Ringman on Top 5 Fake Security Applications in the 1st Quarter of 2011
Tag Cloud
anonymous antivirus black hat SEO botnet businesses capacitors computer virus cybercrime cyberwarfare economy facebook fake av foreign hackers fraud google hackers hacktivism identity theft internet security koobface law malware online shopping password security phishing politics removal guide reports rogue antivirus scams scareware search engine poisoning SEO poisoning social engineering social media social media malware social networking spam tips trends trojan Twitter virus worm zeus


