Malicious hardware

Incorporating malicious hardware into a computer system or network will leave it vulnerable to electronic attack. Malicious hardware could act as a keystroke logger or open a 'back-door' to provide a hacker with access. This kind of intrusion is normally carried out after manufacture or during maintenance sessions. Attacks using malicious hardware usually involve a much larger investment than software alone and so often target higher-value systems. The greatest risk comes from equipment and systems bought from or maintained in questionable locations.

To mitigate this risk, ensure that hardware comes from a trusted source and is installed and maintained by trusted personnel.