riskware
Legitimate but exploitable
Riskware is software that isn't inherently malicious but poses security risks through its functionality.
Programs for remote access, password recovery, or system administration become riskware when they could be exploited by attackers or used without proper authorization: The security scan flagged several riskware applications that IT had installed for legitimate purposes.
The term acknowledges that useful tools can become dangerous in the wrong hands.
Organization's formal rules
- complianceAdhering to requirements
- BYODPersonal device workplace policy
- privacy violationUnauthorized access to personal information
- unauthorized accessEntry without permission
exploitation · attack vector · vulnerability · compromise · infection · payload · command and control · exfiltration
Having two applications
- IT managementSupervising organizational technology resources
- penetration testingAuthorized security vulnerability assessment
- parental controlSettings restricting child access
- remote desktopSoftware for distant computer control
diagnostic · automation · scripting · sysadmin · enterprise · authorized · licensed · commercial
Malware detection program
- scannerDevice that reads data
- heuristicsPractical problem-solving shortcuts
- signatureHandwritten name for verification
- quarantineIsolation preventing disease transmission
false positive · flagged · alert · notification · threat assessment · behavioral analysis · sandbox · suspicious
Software recording typed input
- cryptominerCurrency calculation software
- password crackerTool defeating authentication barriers
- RATRemote intrusion software
- backdoorHidden bypass mechanism
rootkit · toolbar · browser hijacker · downloader · dialer
corporate policy
Organization's formal rules
- complianceAdhering to requirements
- BYODPersonal device workplace policy
- privacy violationUnauthorized access to personal information
unauthorized access · exploitation · attack vector · vulnerability · compromise · infection · payload · command and control · exfiltration · lateral movement
dual-use
Having two applications
- IT managementSupervising organizational technology resources
- penetration testingAuthorized security vulnerability assessment
- parental controlSettings restricting child access
remote desktop · diagnostic · automation · scripting · sysadmin · enterprise · authorized · licensed · commercial
antivirus
Malware detection program
- scannerDevice that reads data
- heuristicsPractical problem-solving shortcuts
- signatureHandwritten name for verification
quarantine · false positive · flagged · alert · notification · threat assessment · behavioral analysis · sandbox · suspicious · grayware
keylogger
Software recording typed input
- cryptominerCurrency calculation software
- password crackerTool defeating authentication barriers
- RATRemote intrusion software
backdoor · rootkit · toolbar · browser hijacker · downloader · dialer