March 2006 Taner Erig - EMU5-1 Basic Information on Spyware and Adware n It is difficult to define spyware and adware with precision. The working definition may be software that aids in gathering information about a person or organization without their knowledge and which may send such information to another entity without the consumer’s consent, or asserts control over a computer without the consumer’s knowledge. n For simplicity, one can refer to these types of software as Malware (as in Malicious Software).

March 2006 Taner Erig - EMU5-2 Malware - A Serious Threat n Malware is distributed in the same ways as other software; it can be downloaded from the Internet, bundled with other software, transferred via peer-to- peer (“P2P”) file-sharing networks, installed from CDs, or pre-installed on new computers. In addition, malware may be distributed by instant messaging, s, or web pages. n Malware is a serious and growing problem.

March 2006 Taner Erig - EMU5-3 Possible Damages of Malware n Can impair the operation of computers, causing them to crash and interfering with the ability of consumers to use them. n Certain ones, especially keystroke loggers, can create substantial privacy risks. n Can assert control over computers, and use that control to create security risks and cause other harms. n Malware often is more difficult to uninstall than other types of software.

March 2006 Taner Erig - EMU5-4 What Is Being Done? n The incidence of spyware can be decreased if the private sector and the government act, separately and in concert: Government and Industry Solutions n Technological solutions – firewalls, anti-adware/spyware software, and improved browsers and operating systems – can provide significant protection to consumers from the risks related to spyware.

March 2006 Taner Erig - EMU5-5 Possible Solutions n Government should: (1)increase criminal and civil prosecution under existing laws of those who distribute spyware/adware; (2)increase efforts to educate consumers about the risks of spyware/adware; and (3)encourage technological solutions. n Industry should: (1) develop standards for defining spyware and disclosing information about it to consumers; (2) expand efforts to educate consumers about spyware risks; and (3) assist law enforcement efforts.

March 2006 Taner Erig - EMU5-6 Useful Websites n Safer Networking Limited (donations welcome) n Federal Trade Commission (taxes welcome) Staff Report (March 2005) n Grisoft (purchases welcome)