Malicious code that triggers when specific conditions are met, such as a date or user action.
A logic bomb is malicious code designed to execute when triggered by specific conditions—a particular date, file deletion, or user action. Logic bombs are often planted by insiders (disgruntled employees ensuring damage if they're terminated) or embedded in legitimate software to activate later. The delayed execution makes logic bombs difficult to detect until triggered. Notable cases involve IT administrators planting logic bombs before leaving organisations.
Why It Matters
The DSC Perspective:
Logic bombs represent insider threat risk. Proper offboarding procedures, code review practices, and access revocation are essential. Consider the risk when employees with system access leave under difficult circumstances.