Malware types (virus, worm, trojan, ransomware) in Cybersecurity - Time & Space Complexity

Time Complexity: Malware types (virus, worm, trojan, ransomware)

O(n²)

Understanding Time Complexity

When studying malware types, it helps to understand how their actions grow as they spread or infect systems.

We want to know how the effort or damage increases as more devices or files are involved.

Scenario Under Consideration

Analyze the time complexity of this simplified malware spreading code.

for infected_device in network:
    for connected_device in infected_device.connections:
        if connected_device.is_vulnerable():
            infect(connected_device)

This code shows how a malware worm spreads by trying to infect connected devices in a network.

Identify Repeating Operations

• Primary operation: Checking and infecting connected devices.
• How many times: For each infected device, it checks all its connections.

How Execution Grows With Input

As the number of infected devices grows, the number of checks grows too.

Input Size (n)	Approx. Operations
10	About 100 checks
100	About 10,000 checks
1000	About 1,000,000 checks

Pattern observation: The work grows very fast as more devices get infected, roughly multiplying by itself.

Final Time Complexity

Time Complexity: O(n²)

This means the effort to spread grows roughly with the square of the number of infected devices.

Common Mistake

[X] Wrong: "The malware only does a fixed amount of work no matter how many devices are infected."

[OK] Correct: As more devices get infected, the malware tries to infect more connections, so the work grows quickly.

Interview Connect

Understanding how malware spreads helps you think about how systems can be protected and how attacks scale in real life.

Self-Check

"What if the malware only tried to infect one new device per infected device instead of all connections? How would the time complexity change?"

Practice

1. Which type of malware replicates itself to spread to other computers without needing to attach to a program?

easy

A. Worm

B. Virus

C. Trojan

D. Ransomware

Solution

1. Step 1: Understand malware replication methods

   Viruses need to attach to files, but worms can spread independently over networks.

2. Step 2: Identify malware that self-replicates without a host

   Worms are known for spreading themselves without needing to attach to other programs.

3. Final Answer:

   Worm -> Option A

4. Quick Check:

   Self-replicating malware without host = Worm [OK]

Hint: Worms spread alone, viruses need hosts [OK]

Common Mistakes:

• Confusing virus with worm
• Thinking trojans self-replicate
• Mixing ransomware with spreading behavior

2. Which of the following correctly describes a Trojan horse in malware terms?

easy

A. Malware that replicates itself over networks

B. Malware that encrypts files and demands payment

C. Malware that spreads by attaching to files

D. Malware disguised as legitimate software

Solution

1. Step 1: Define Trojan horse malware

   Trojans appear as normal software but hide harmful actions inside.

2. Step 2: Match description to options

   Malware disguised as legitimate software matches the definition of a Trojan as disguised malware.

3. Final Answer:

   Malware disguised as legitimate software -> Option D

4. Quick Check:

   Trojan = disguised malware [OK]

Hint: Trojans hide inside normal-looking apps [OK]

Common Mistakes:

• Confusing ransomware with Trojan
• Thinking Trojan self-replicates
• Mixing virus and Trojan definitions

3. Consider this scenario: A malware encrypts all files on a computer and demands money to unlock them. What type of malware is this?

medium

A. Ransomware

B. Worm

C. Trojan

D. Virus

Solution

1. Step 1: Identify malware behavior described

   The malware encrypts files and demands payment to restore access.

2. Step 2: Match behavior to malware type

   Ransomware is known for encrypting files and demanding ransom.

3. Final Answer:

   Ransomware -> Option A

4. Quick Check:

   Encrypts files + demands money = Ransomware [OK]

Hint: Ransomware locks files and asks for payment [OK]

Common Mistakes:

• Confusing ransomware with virus
• Thinking Trojan encrypts files
• Mixing worm behavior with ransomware

4. A user reports their computer is slow and programs crash often. They find a malware that attaches itself to files and spreads when files are shared. Which malware type is most likely causing this?

medium

A. Trojan

B. Virus

C. Worm

D. Ransomware

Solution

1. Step 1: Analyze malware behavior

   The malware attaches to files and spreads when files are shared, causing crashes and slowdowns.

2. Step 2: Identify malware type matching this behavior

   Viruses attach to files and spread through sharing, unlike worms which spread independently.

3. Final Answer:

   Virus -> Option B

4. Quick Check:

   Attaches to files + spreads by sharing = Virus [OK]

Hint: Virus attaches to files, spreads via sharing [OK]

Common Mistakes:

• Confusing worm with virus
• Thinking Trojan spreads by itself
• Mixing ransomware symptoms with virus

5. A company wants to protect its network from malware that can spread automatically without user action and also from malware disguised as useful software. Which two malware types should they focus on preventing?

hard

A. Virus and Ransomware

B. Trojan and Virus

C. Worm and Trojan

D. Ransomware and Worm

Solution

1. Step 1: Identify malware that spreads automatically

   Worms spread automatically over networks without user action.

2. Step 2: Identify malware disguised as useful software

   Trojans appear as legitimate software but carry harmful payloads.

3. Final Answer:

   Worm and Trojan -> Option C

4. Quick Check:

   Auto-spread = Worm, disguised = Trojan [OK]

Hint: Worm spreads alone; Trojan hides in apps [OK]

Common Mistakes:

• Choosing ransomware instead of worm
• Mixing virus with Trojan
• Ignoring automatic spread behavior