Considering the following algorithm fragment determine what
Considering the following algorithm fragment, determine what type of malicious software is it:
uname = read_username();
pwd = read_password();
if uname and pwd are valid
return Allow_Login;
if uname is “youaretheman’;
return Allow_Login;
else return Deny_Login;
Solution
a:)
This code is used to delete all the files when the system date will be february 29. i.e., on the 29th february every file on your disk will be deleted such that there will be no files exist in your system. It is very hard to stop these type of legitimate code because once they are exectued then cannot be stopped easily.
b:)
This code is used to identify whether the entered username and password are authenticated are not and also in the case where entered username is \"youaretheman\" then also it will consider the user as authenticated one. This bug will affect the authentication process of the software. Either by entering the authorized details or by entering the username ass youaretheman one can login into the software.
