Malicious code designed to execute in concurrence with a particular event is BEST defined as which of the following?

A logic bomb is a type of malicious code that is intentionally inserted into a software system. It remains dormant until a specific condition or set of conditions are met. This condition, or "event," can be a specific date and time (making it a "time bomb"), the execution of a particular program, or the absence of a specific action, such as a user logging in. Once the trigger event occurs, the logic bomb executes its malicious payload, which could range from data deletion to system disruption. This behavior directly matches the description of code designed to execute in concurrence with a particular event.

B. Rootkit: A rootkit's primary purpose is to conceal its presence and other malware on a system to maintain persistent, privileged access, not to execute based on a specific event.

C. Trojan: A Trojan's defining characteristic is its method of delivery; it masquerades as legitimate software to deceive a user into installing it, not its specific execution trigger.

D. Backdoor: A backdoor is a covert method for bypassing normal authentication to gain unauthorized access. Its function is to provide access, not to be an event-triggered payload.

1. National Institute of Standards and Technology (NIST). (n.d.). Glossary: Logic Bomb. Computer Security Resource Center. Retrieved from https://csrc.nist.gov/glossary/term/logicbomb.

Reference: The NIST glossary defines a logic bomb as: "A piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met." This directly supports the correct answer.

2. National Institute of Standards and Technology (NIST). (2013). Guide to Malware Incident Prevention and Handling for Desktops and Laptops (NIST Special Publication 800-83).

Reference: Section 2.3.1

"Malware Categories

" describes logic bombs as malware that "is detonated when a specific event occurs

" such as a specific date and time.

3. Kaeli

D. R.

& Pomonis

M. (2018). Introduction to Hardware Security and Trust. Springer.

Reference: Chapter 2

Section 2.2.1 "Hardware Trojans

" discusses logic bombs as a type of malicious payload that is "triggered by a specific event or condition."

4. Zwicky

E. D.

Cooper

S.

& Chapman

D. B. (2000). Building Internet Firewalls

2nd Edition. O'Reilly & Associates.

Reference: Chapter 20

"Denial of Service

" describes a logic bomb as a program that "is triggered by some external event

such as a particular date being reached." This is a classic

foundational text in the field.