Hardware, firmware, or software that is intentionally included or inserted in a system for a harmful purpose.
SOURCE: CNSSI-4009
