Portal de Periódicos da CAPES

An empirical investigation of the prevalence of spyware in internet shareware and freeware distributions

2005; Emerald Publishing Limited; Volume: 18; Issue: 6 Linguagem: Inglês

10.1108/17410390510628391

1758-7409

Kyle Kucera, Michel Plaisent, Prosper Bernard, Lassana Maguiraga,

Advanced Malware Detection Techniques

Purpose Spyware is a controversial software technology that allows the surreptitious collection of personal information from computers linked to the internet. The purpose of this study was to determine the prevalence of spyware in internet shareware and freeware and to investigate the personal information collected. Design/methodology/approach The methodology was a two‐phase, multi‐case study. The first phase determined that five of the 50 most popular pieces of Windows ® ‐based freeware and shareware available to internet users from CNETDownload.com were suspected of containing spyware: these were included as data sources for phase two. The purpose of phase two was to confirm the existence of spyware and to identify the types and frequencies of any personal data transmissions. For this phase, data were collected and analyzed utilizing a passive network monitor program to examine packets of data transmitted from a personal computer to external destinations on the internet. Findings The findings confirmed the existence and use of spyware in three of five suspected cases. However, the data indicated that there was a low occurrence of spyware and that these programs have the capability to collect numerous types of personal data. The main limitation is that these results are based on a snapshot of data obtained during five days. Practical implications The study has practical implications for internet users, who should be aware that spyware exists and understand its potential threat. Spyware developers should provide the user with an effective removal tool. Finally, marketers are cautioned that spyware might alienate customers. Originality/value This paper confirms the potential for misuse of these programs.