In computer security, a computer program with an apparently or actually useful function that contains additional(hidden) functions that surreptitiously exploit the legitimate authorizations of the invoking process to the detriment of security.

• 在计算机安全学中，一种计算机程序，表面上或实际上有某种有用的功能，而含有附加的(隐藏的)可能利用了调用进程的合法特许来危害系统安全的功能。