Keylogging

Abstract

There are many places along the path from a user to a web site where the user’s private information may be stolen. Although the “private information” can be anything, we focus on authentication credentials for simplicity: a username and password. It could be argued that the password is really the more sensitive piece of information between the two, so we will further focus on password theft. It will be assumed for now that a password is typed on the keyboard, although we will discuss later how that assumption is relaxed, and why.