Keyloggers – Assurance or Abuse

The basic function of a Keylogger is to track keyboard keystrokes. This function is usually performed under typically in clandestine conditions whereby the activities on a computer are secretly recorded (logged) for various purposes. A Keylogger is generally meant to do a lot of good, for example, as part of a corporate surveillance structure. Elements like monitoring and tracking unwanted access to certain restricted websites or unscrupulous means of gaining information from within company networks form a regular part of a fundamental cyber monitoring mechanism. Various Keylogging methods exist that make it possible to track and monitor computer activities including hardware as well as software based approaches. Keystroke logging or recording is also possible over vast physical distances through the use of electromagnetic and acoustic analysis, where the radiation emitted by each keystroke is recorded and analyzed.



The hardware-based Keylogger includes BIOS-level firmware, Keyboard hardware, Wireless keyboard sniffers, Electromagnetic emissions, Keyboard overlays, Acoustic keyloggers, and Optical surveillance.



The way hardware keyloggers work is by means of a hardware circuit mostly attached somewhere in between the computer keyboard and the computer. The keyboard’s cable connectors are important for this approach. However, a more robust and covert approach is to install the hardware inside the keyboard itself for maximum furtiveness. This not only clears the cabling, but also allows for a robust way of logging keystrokes. As users start using the keyboard, all keystrokes get recorded to their internal memory, and can further be accessed through some type of command.



The immediate benefit of a hardware-based keylogger is the independence from relying on an operating system (for e.g. Windows OS). This particular approach is undetectable by any software and therefore tends to be reliable in performing surveillance activities. Care should of course be taken when installing the hardware as it may be easily visible from the outside.



Another way to detect computer activities through Keystrokes is by the use of Wireless Keyboard Sniffers which allow you to collect data packets that are transferred from a wireless keyboard and its receiver, but this method may require close proximity with the targeted computer. On the other hand, the electromagnetic emissions generated by a wired keyboard can be recorded from up to 20 meters away.



Keyloggers are critical in providing active surveillance to people from varied backgrounds including concerned parents who would like to track their children’s online activities to keep any potential harm at bay, corporate security where the tracking of computer usage can be monitored and tied directly to performance and appraisals, as well as for any potential data breaches, law enforcement and security agencies who can use Keyloggers for defense or national security purposes, and even covetous spouses or partners who tend to often have some form of use for Keyloggers.



It is not the tool that is bad. It is the intended use of that tool that makes the difference between assurance and abuse. A Keylogger has many benefits that can be aligned with any return on investment, whether for an individual or a corporation.