Logic bomb
|
|
- This article is about Logic bombs, a type of malicious software code. For the psychedelic trance group, see Logic Bomb (band)
A logic bomb is a piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met.
For example, a programmer may hide a piece of code that starts deleting files, should he ever leave the company (and the salary database).
Software that is inherently malicious, such as viruses and worms, often contain logic bombs that execute a certain payload at a pre-defined time or when some other condition is met. This technique can be used by a virus or worm to gain momentum and spread before being noticed. Many viruses attack their host systems on specific dates, such as Friday the 13th or April Fool's Day.
To be considered a logic bomb, the payload should be unwanted and unknown to the user of the software. As an example, trial programs with code that disables certain functionality after a set time are not normally regarded as logic bombs.
Historic logic bombs
In June 1992, a defense contractor General Dynamics employee, Michael Lauffenburger, was arrested for inserting a logic bomb that would delete vital rocket project data. It was alleged that his plan was to return as a highly-paid consultant to fix the problem once it triggered. The bomb was stumbled on by another employee of the company. Lauffenburger was charged with computer tampering and attempted fraud and faced potential fines of $500,000 and jail-time [1] (http://www.rvs.uni-bielefeld.de/publications/Incidents/DOCS/Institution/Risks/COPY/11.95.html#subj2), but was ultimately fined $5,000 [2] (http://www.nwfusion.com/newsletters/sec/2002/01514405.html).
In February 2000, Tony Xiaotong was indicted before a grand jury accused of planting a logic bomb during his employment as a programmer and securities trader at Deutche Morgan Grenfell. The bomb had a trigger date of July 2000, and was discovered by other programmers in the company. Removing and cleaning up after the bomb allegedly took several months.
See also
External links
- Logic bombs, part 1 (http://www.nwfusion.com/newsletters/sec/2002/01514405.html), part2 (http://www.nwfusion.com/newsletters/sec/2002/01524323.html), part 3 (http://www.nwfusion.com/newsletters/sec/2002/01539418.html), part 4 (http://www.nwfusion.com/newsletters/sec/2002/01546439.html) — NetworkWorldFusionnl:Logic bomb