Small application programs that are automatically downloaded and executed and that perform an unauthorized function on an information system.
SOURCE: CNSSI-4009
