|
|
|
|
|
|
|
What is a Keystroke Logger?
A keystroke logger, often called keylogger or keystroke recorder, is typically used as a diagnostic tool in software development to record everything entered from a user's keyboard. It can also be used for more notorious ends, such as covert surveillance. |
|
|
|
 |
|
Types of Keystroke Recorders
There are 2 primary types of keystroke recorders: hardware-based, and software-based. A hardware-based keylogger is a battery-sized device which is added to a user's personal computer by attaching it to their keyboard cable, installing it inside their keyboard, or as a standalone keyboard with the keylogger already built in. Keystrokes are then recorded on a miniature hard drive on the device.
A software-based keylogger is an application that is installed on a user's computer. It saves all their keystrokes to a file, which can then be viewed locally, or automatically uploaded to the Internet.
Issues to Consider
- Although it is commonly believed that the use of an onscreen keyboard will circumvent a keylogger, this is false. Because onscreen keyboard keystrokes are sent to an external target program, they are recorded. Also, some keyloggers can take screenshots of the user's GUI, recording any data visible on the screen.
- One way to trace the source of a software-based keystroke recorder is to identify where the data is uploaded to on the Internet, or to which E-mail address it is sent to. This information can then be used to trace, and identify, the source.
- Although not very common, the use of secure I/O (secure input output) can be used to circumvent a keylogger. Secure I/O refers to a protected path between the computer user and the software with which they believe they are interacting.
|
|
|
|
|
|
|
