28
2.10 Utilizing "ready to use" commercial components
Using commercial software components has two main advantages:
1.
Speed up developing process.
2.
Commercial components cannot be blocked by antivirus software.
Here are partial list of software components and vendors:
-
IP*Works! by n software inc [17]
-
SocketTools by Catalyst Development Corporation [18]
-
Chilkat by Chilkat Software, Inc. [19]
-
WOD by WeOnlyDo! Software [20]
These vendors produce very powerful programmable components, which has the
following features (descriptions from the vendors' web sites):
-
sending email
-
transferring files
-
managing networks
-
browsing the web
-
consuming web services
-
using the Secure Sockets Layer (SSL), Transport Layer Security (TLS)
protocols and SSH
-
components for major Internet Protocols (FTP, HTTP, SMTP, POP, IMAP,
SNMP, LDAP, DNS, RSS, SMS, Jabber, SOAP, WebDav, RAS, XML,
Telnet)
-
encryption, hashing, and digital signatures
-
Character encoding, extractors, converters and parsers
-
Servers ( IMAP, S/FTP, POP3, WEB, SMTP, DHCP)
These components come in different "flavors" such as ActiveX, .NET and stand-
alone.
This is another powerful "raw material" to build malware like a LEGO.
2.11 The network issues
In this section, I want to point out to some important network issues that I think or
read about. Some network tricks could be dangerous if used by malware.