Backdoors

In short: A backdoor is a hidden access to a system that bypasses normal protection mechanisms.

In more detail: Backdoors can be intended by the manufacturer, a programming error, or installed by attackers. They bypass login and rights management.

In Depth

Types

• Hard-coded passwords (“hardcoded credentials”).
• Maintenance accesses that were never deactivated.
• Accesses installed by the attacker after a break-in (backdoor trojans).
• Manipulated software supply chains.

Politics

Again and again it is demanded that encryption be equipped with government back doors. Security experts warn: a back door for “the good guys” can also be used by criminals.

Protection

Code reviews, software only from trusted sources, updates, regular checks of open ports with nmap.

See also: Backdoor Trojan, Remote Control (by Attackers), Exploit