Specifications

Trend Micro™ OfficeScan™ 10 Administrator’s Guide
6-2
About Web Threats
Web threats encompass a broad array of threats that originate from the Internet. Web
threats are sophisticated in their methods, using a combination of various files and
techniques rather than a single file or approach. For example, Web threat creators
constantly change the version or variant used. Because the Web threat is in a fixed
location of a Web site rather than on an infected computer, the Web threat creator
constantly modifies its code to avoid detection.
In recent years, individuals once characterized as hackers, virus writers, spammers, and
spyware makers are now known as cyber criminals. Web threats help these individuals
pursue one of two goals. One goal is to steal information for subsequent sale. The
resulting impact is leakage of confidential information in the form of identity loss. The
infected computer may also become a vector to deliver phish attack or other
information capturing activities. Among other impacts, this threat has the potential to
erode confidence in Web commerce, corrupting the trust needed for Internet
transactions. The second goal is to hijack a user’s CPU power to use it as an instrument
to conduct profitable activities. Activities include sending spam or conducting extortion
in the form of distributed denial-of-service attacks or pay-per-click activities.
Web Reputation
OfficeScan leverages Trend Micro’s extensive Web security databases to check the
reputation of Web sites that users are attempting to access. The Web site’s reputation is
correlated with the specific Web reputation policy enforced on the computer.
Depending on the policy in use, OfficeScan will either block or allow access to the Web
site. Policies are enforced based on the client’s location.