Concept of a Harmful Software Intended for Disabled Interference in the Operation of Electronic Computer Equipment

Abstract

The main purpose of the article is to provide forensic detection of a malicious software program that is created for unauthorized interference with the work of computers, computers, automated systems, computer networks and telecommunication networks, in order to promote effective counteraction to cybercrime. Such a need arises in connection with the lack of a unified approach to the definition of «malware» and criteria for assigning programs to harmful ones.

The article analyzes the essence and content of the notion of «malware». Its characteristic forensic features and properties are determined. The destructive features were investigated, definitions and criteria for assigning the software to the category «harmful» were given.

A clear definition of the term «malware» results from the definition of a unified approach to the qualification of such an illegal act, the search and fixing of traces of such an offense, as well as computer-technical expertise.

In the scientific article for discussion are proposed to consider the scientific views of scientists on this topic, a detailed study author of the concept of «harm» in relation to software.

The lack of a clear definition of «malware» means that offenders may in some cases avoid being held responsible for their actions. This factor can be considered as an additional sign of the latency of this type of cybercrime, which is explained not by the awareness of law enforcement officers in identifying malicious software, the  

remoteness of the confidence of the injured party in punishing the perpetrators, without the use of measures to reimburse the damage and the need to preserve prestige, especially as it relates to private business entities.

It should be noted that when applying the term «virus» (the mechanism of distribution is similar to the biological environment), the mechanism of unauthorized interference is used, since the most common program for unauthorized interference with electronic computing (80 %) of all malicious software is the viruses, in the notion of a malicious software. Thus, the term «virus» as a generalization of the concept of the entire category of «malware» is obsolete, and therefore for the generalization of the entire category of such software means should be used as a «malware».

Taking into account the statement outlined in the article, it should be noted that when adopting regulatory acts that will regulate the sphere of counteracting unauthorized interference with the work of electronic computers by means of malicious software, it is necessary to define the notion of «malicious software», namely «Malware is a software tool in the form of code, script, active content, software that exists in a cybernetic environment, specially created, constructively designed and technically fit for unauthorized interference with the work of electronic computers, and does not have any other software, technical, economic, and also applied purpose and leads to change, modification, blocking, copying or destruction of information, consumption of technical resources electronically. injecting equipment». Such a definition in our opinion will most accurately meet the requirements of the present and the relevance of measures to combat cybercrime.

A malicious software tool is a specific source of increased risk. This specificity of a malicious software is precisely in their constructive purpose regarding unauthorized interference with the work of electronic computers, as well as the ability to disguise. Therefore, researching such a software tool must adhere to certain safety precautions to prevent its destructive effect.