Guarded ID

Though PC users are worried about spyware that tracks web site visits, and crashes their PCs, there are more insidious threats out there. A more powerful breed of spyware can log keystrokes (including passwords and credit card numbers) and send that information to criminals. This type of software is called a keylogger.

What is a keylogger?

A keylogger is a type of surveillance software that has the capability to record every keystroke you make and is logged to a file (usually encrypted). A keylogger can record instant messages, e-mail, and any information you type at any time using your keyboard. The log file created by the keylogger can then be sent to a specified receiver. Some keylogger programs will also record any e-mail addresses you use and Web site URLs you visit.

A keylogger can be inserted into a victim’s computer via several ways. It can be carried by a virus or spyware. It can come as an attachment in an e-mail. For example, the Corporate IT Forum spam email contains a website link, the clicking of which, causes a keylogger to be loaded into the computer. It can even be embedded in an mp3 file or delivered via a XSS (Cross Site Scripting) attack.

Why current anti-virus software is ineffective?

All anti-spam and anti-virus tools are based on scanning a computer for files with a particular signature. The database containing signatures of known bad files have to be continuously updated. The major caveat in this approach is the existence of the signature of a known problematic file. Spammers and criminals are currently deploying sophisticated software which dynamically changes the file signature. Therefore, anti-spam tools are no longer effective against keyloggers. Also, there is significant time between detecting a new keylogger on the Internet and the anti-keylogging signature being updated on anti-virus/spyware software. This time gap can take a month to a couple of months.

How Guarded ID protects users

GuardedID uses a different approach to defend against keyloggers. Rather than trying to detect keyloggers, it takes a preventive approach. It takes control of the keyboard at the lowest possible layer in the kernel. The keystrokes are then encrypted and sent to the browser via an “Out-of-Band” channel bypassing the Windows messaging queue. GuardedID has a built in self-monitoring capability. This prevents it from being bypassed by other software. If GuardedID is tampered with in any way, it will warn the user of the breach.

More Information

For more information about key logging and how Guarded ID defends against it, please download our white paper by clicking here.

Purchase Guarded ID

To purchase Guarded ID, please visit our online store. and select from our menu of products and services.