ActiveX insecurity

ActiveX Technology

• ActiveX controls

  • programs that execute on your machine

• ActiveX containers

  • hold one or more controls

• ActiveX scripting

  • allows interactive commands to execute from anywhere

Authenticode

• Provides:

  • tamper-evidence
  • publisher identity

• Does not provide:

  • virus detection
  • Trojan horse detection
  • containment of malicious behavior
  • version control

Previous slide

Next slide

Back to first slide

View graphic version