A Free Educational Resource Created by Carnegie Mellon University to Empower You to Secure Your Part of Cyberspace

Active Content

Interactive Web content that can carry malicious code

Active content (also known as mobile code) consists of programs that make actions happen automatically on a Web page without your knowledge or consent. Active content includes Java applets, ActiveX controls, Java Scripts, Visual Basic scripts, plug-ins, executable files, animated GIFs, stock tickers, weather maps, and streaming audio and video.

Active content is used on Web sites to create animations and other interactive features. Unfortunately, it can also be used to send and execute malicious code on your computer. Active content can be downloaded onto your computer without your consent, and it can also be delivered in emails and instant messages.

Threats that take advantage of vulnerabilities in active content technologies include:

See these encyclopedia entries for information on protective measures against these threats.

Protective Measures

Tools

  • SurfinShield: This software actively monitors downloaded active content and blocks suspicious behavior. See the Finjan Web site  for more information.

References

Links

My home page