Industry


Ads by TechWords

See your link here


Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Douglas Schweitzer's picture
Douglas Schweitzer

The Security Sector

Keylogging-Killer Keyboard

When I read John E. Dunn's article at TechWorld.com, "Kaspersky adds anti-keylogger keyboard," I realized Kaspersky has really hit on something here. Keylogging is an especially loathsome exploit - we all remember the Mydoom worm's Trojan that unleashed keyloggers that ended up stealing countless credit card numbers and other data. Keylogger infiltration can create major disturbances.

The idea is to thwart keystroke loggers by engaging a virtual keyboard. It's supposedly not really a new idea, but as Dunn states, "Kapersky is the first major security vendor to include such a feature in a standard Net security program." By using an on-screen keyboard (which will cache the keystrokes), users avoid entering physical keystrokes that are generated through keyboard drivers - ready for malicious programs to pick up, record and abuse.

Kaspersky's got other security features lined up for it's Anti-Virus 2009 (due later this month) but I have to say it's the virtual keyboard idea that seems the most innovative. Unless the program has major flaws, I can't see how this product will fail.

What People Are Saying

Keylogging-Killer Keyboard

I was reading some articles on the Internet a year ago about this same subject of an anti-keylogger keyboard and one article stated that there was no way of avoiding a keylogger program from stealing passwords typed on a keyboard or on a virtual keyboard.

The reason being, which I do not remember exactly, was that the keys typed on a keyboard or virtual keyboard go through the computer in various locations where the keylogger program can read the entered keys.

The only utility I am aware of that may prevent keyloggers from working is SnoopFree Privacy Shield which can be obtained at the following link:

http://www.snoopfree.com/default.htm

So I am interested in how Kaspersky will be able to do it when I have read it is not possible.

Keyloggers can't even see a Secure Swipe device

This comment was quite correct. The strokes, whether from a keyboard or a virtual keyboard, must be processed by the computer and are susceptible to rootkit attack, even if the keylogging attack gets thwarted.

There is a new patented hardware device (using patented software technology called Dynamic SSL) that encrypts data swiped from a card (ie: credit card, debit card, back card, smart card)so that the data is SSL encrypted BEFORE it even gets to the computer.

I'd be happy to follow up with whomever is interested - although this post is 8 months old now...for more information visit www.smartswipe.ca

I checked the linked

I checked the linked article, but it had no additional information on my single concern: data entry speed will be slowed considerably. Maybe for some hunt-and-peck typists it could actually be faster, but for those of us who actually learned to type 40 years ago it will almost assuredly take twice as long to enter any information. This is a small price to pay, I imagine, but I do see it as a drawback.