Software is the dominant means of monitoring computer activity. It has the advantage that it can transmit activities over a network. Many different software programs have been created to address the need for monitoring need (over 300). In response, BUT many other programs have also been released which will detect/ defeat these programs.

Keystroke recording software has existed almost since the arrival of the first computers. These programs create a log of all keystrokes typed and store the log file on the computer hard drive. These programs are generally interrupt-driven (from the keyboard interrupt). Thus, it consumes computer time while it reads the keystrokes and writes them to the computer hard drive. Further, with software monitoring the file on the hard drive may be discovered and erased/modified. That’s because these programs reside on the hard drive (where they can be detected).
 
Many software monitor programs have come under the gun for their tendency to make the system unstable. Storing screen images on your hard drive every few seconds will have a negative impact on system performance. Maybe even a noticeable one that will cause you to get caught when the computer user looks to see why their computer is running so much slower.

It is desirable for software monitors to not show up in the program manager, and to not be listed as a resource for consuming CPU time. This desire leaves the program running under the operating system in a non-standard manner. If the program does not appear in the Task Manager, and the program causes the computer to lock up, how do you shut the program down? Further, if the program repeatedly causes the computer to lock up (and it starts running every time you power up) how do you remove it from your system? Because of these issues, software should be from a reputable company with accessible support should a problem occur.

Anti-spy programs are relatively new on the scene. They will detect and sometimes remove the software keystroke recorders. SpyCop (www.spycop.com) advertises that it can detect over 300 commercially available keystroke recording programs. SpectorSoft acknowledges that it is detected by the "SpyGuard" anti-spy software. No matter how well a keystroke recorder is written, there will always be software that can detect it. Some anti-virus programs are also beginning to attack the software keystroke recorders as well. McAfee anti-virus detects some of the popular keystroke recording software. What this means is that software keystroke recorders may only be a virus update away from being detected/disabled.

Worse yet. Software monitor programs can even be fooled using “Erasers.” Erasers attempt to "cover the tracks" of the computer user. Let's say that you are a thirteen-year-old kid, and you don't want your parents to know what you are doing on the computer. If you disable their monitoring software, they may find out. This is where an eraser comes in. It appears to the parents as if the computer has not been in use. "Surfsecret Privacy Protector" advertises that it will erase all Internet history, and also erase history from over 30 third party applications. Programs such as "SpyGuard" combine the anti-spy functions with the eraser functions by both detecting monitoring software and by erasing Internet history. With some monitoring programs, the user may be able to disable the monitoring software through the process manager, and then manually re-launch the monitoring software when they are done.

COMPUTER MONITORING WITH HARDWARE

Hardware keystroke recorders contain two main components: a simple microprocessor, and non-volatile memory. The microprocessor handles tasks such as: interpreting keystrokes, checking for the access password, and displaying menu options. The non-volatile memory is a fairly large sized memory that is used to store the keystrokes. Non-volatile memory retains data even during a power loss. This allows a hardware keystroke recorder to be unplugged and still retain the keystroke log. Further, the ability to retain the keystroke log even when unplugged, makes it a portable device. It can be used to record on one computer, and can be read out on another computer. This is useful if one desires to record activities at home, and review the data at the office, for example.

Hardware keystroke recorders come in two different physical forms. Devices such as the keystroke recorders are about the size of an AA battery, and plug in to the back of the computer between the keyboard port and the keyboard cable. The power to the device is supplied by the keyboard port, so that no additional wiring is necessary.

Hardware keystroke recorders require no specialized software on the computer system. They are accessed through a "host program", which can be any word processor or text editor. Hardware keystroke recorders are constantly examining the keystroke stream looking for the access password. As soon the device sees the access password, it temporarily shuts down the keyboard and "types" a menu on the screen. This is perhaps the most novel aspect of the hardware keystroke recorder. This technology allows hardware keystroke recorders to be used without installing any software on the computer system, and allows recording to take place without consuming any CPU cycles.

CONCLUSION

Hardware keystroke recorders present significantly more advantages as opposed to software computer monitoring. Because there is nothing installed on the hard drive, it is undetectable by all anti-spy, and eraser software, now and into the future. Implementing software solutions requires constant vigilance (both in time and expense) on behalf of the user to make sure that their solution is still performing. Hardware keystroke recorders work at the source (where keys are actually being pressed) before they reach the rat's nest of software running inside the box.