Malware Defense History

by Dr. Nikolai Bezroukov.

Copyright: Dr. Nikolai Bezroukov 1994-2013. Unpublished notes. Version 0.80.October, 2013

Contents : Foreword : Ch01 : Ch02 : Ch03  : Ch04 : Ch05 : Ch06 : Ch07 : Ch08 : Ch09 : Ch10 : Ch11 : Ch12 : Ch13

Chapter 2: Social Aspects of Malware

J Simple Questionnaire
for Determination of Effects of Virus Alerts
on the Survival of the IS Organization
(version 0.8) J

1. Estimate how many e-mails that contain an information about a serious virus threat in you receive from your IT department:
   1. More than one in a month. +15 points.
   2. One a month or so.  +10 points.
   3. One in a quarter. +7 points.
   4. One a year or so +5 point.
   5. None. (You may wish to skip quiz; probably you are in a good shape.) 0 points.
      
2. I think that a viruses that activate immediately after arrival to a user mailbox without any action from the user are: 
   1. Really dangerous and destructive. I know a person who was struck by such a virus. I feel that it's my duty to warn all people ASAP. +15 points
   2. I suspect that that they may be dangerous and destructive,  but I do not know for sure and usually immediately resent such e-mail to warn as many people as possible, just in case  +10 points
   3. I don't know. When I get a message, I pass it on to my LAN administrator and helpdesk. +5 points.
   4. Usually this danger is relevant only for Outlook users, I use other mailer and I delete such e-mails immediately 0 points.
      
3. Imagine that a waning about an incurable computer virus that destroys computers was sent to the company distribution list. What is the most plausible reaction of your IS department: 
   1. They shutdown network and IS management assigns a group of specialists with  little or no relevant training to "research" the threat.  +10 points
   2. They forgot to shutdown network but IS management still manage to assign one clueless but enthusiastic about viruses person to "research" the threat. Then nothing happens, anyway. +7 points
   3. Management convenes the meeting of incompetent persons. Meeting recommends something irrelevant to the problem and some vague/fuzzy message about virus threat are sent to all employees.  After that nothing happens +7 points
   4. In addition to "c" memo is sent to LAN administrators to upgrade or install new server-vbased AV software.  In the confusion, or due to bugs in the antivirus software some servers fall down. This convinces everyone that the threat is real. +5 points
   5. Nothing happens. The helpdesk staff does not know whom to ask or where to look. +5 points
   6. In each case E-mail is sent from the helpdesk to some knowledgeable person to determine if this is true or not (independently of whether the warning was distributed previously or not) +3 points
   7. Nothing happens because everyone already knows about typical hoaxes and a lot of people including helpdesk analysts and LAN administrators have a bookmark for the relevant information on the Internet. 0 points
      
4. A typical LAN administrator in my company:
   1. Has no clue about viruses and believes in each and every story published in PC Week. He often resend this stories to colleagues and upper management to demonstrate his vigilance.  10 points
   2. Viruses are often used as a scapegoat for the problems that semi-competent LAN administrators are unable to solve or problems caused by reckless behavior of LAN administrators that accidentally wiped out some important information. 7 points
   3. Is afraid to install new versions of AV software because previous caused problems on user computers.  +5 points
   4. LAN administrator can detect a typical hoax but has difficulties distinguishing between real inf4ection and false positives. A horror story about multimillion damage due to viruses are widely believed.   +3 points
   5. They know their staff and can fight new viruses using available Internet information and common sense 0 points
      
5. After receiving the typical hoax a typical LAN administrator in my company:
   1. Immediately issue the warning to all users and shutdown the server +15 points
   2. Immediately issue the warning to all users and send additional memo to all his/her  friends and relatives.  He is too excites to shut down the server  +10 points
   3. Send a letter to the helpdesk about the warning because he cannot check its validity via Internet +7 points
   4. Not only he cannot check validity of such letter on Internet, but also cannot troubleshoot typical desktop problems and often attribute them to the viruses +5points
   5. Do not care (just has bookmarks to weather channel and baseball or basketball sites) +3 points.
      
6. In my company, with regard to computer security in general and hoaxes in particular I believe IS management is:
   1. Totally incompetent and ignore the problems +15 points
   2. Cannot distinguish facts from opinions and never listens to anyone but sycophants who are totally incompetent and exaggerate the problem to raise their status. +10 points
   3. Incompetent but open to suggestions from competent specialists or outside information. +7 points
   4. Just security manager is incompetent +5 points
   5. Competent and tries to hire competent staff. 0 points

Scoring:

• Less than 15 points Your firm/department probably is not doomed.
  
   It looks like at least some IS people are cabale to do a useful work and help the users. However, a score of 10 or more points may be a cause for concern, especially combined with high score in question two.
  
  
• 15-20 points. Your firm/department is probably doomed to be outsourced
  
  IS probably a loss leader in your organization, but how long it will take to outsource IS to cut losses in unclear. You do not need to worry much.

  If you are in an educational system, the teachers and college bureaucracy may not be doomed but a majority of the students that are the product of the system might be in trouble.

  Special case: If you work in a government organization, it's not doomed. Moreover it's a sign that your IS  organization may expand in the near future.
   

• More than 20 points. Not only is the firm/department is potentially doomed, but may be you are vulnerable too! 
  
  You may already suffering from depression brought on by prolonged exposure to the incompetent colleagues,  management, or useless tasks, or in case of high score in question two may need to improve your computer literacy.

Etc

Society

Groupthink : Two Party System as Polyarchy : Corruption of Regulators : Bureaucracies : Understanding Micromanagers and Control Freaks : Toxic Managers :   Harvard Mafia : Diplomatic Communication : Surviving a Bad Performance Review : Insufficient Retirement Funds as Immanent Problem of Neoliberal Regime : PseudoScience : Who Rules America : Neoliberalism  : The Iron Law of Oligarchy : Libertarian Philosophy

Quotes

War and Peace : Skeptical Finance : John Kenneth Galbraith :Talleyrand : Oscar Wilde : Otto Von Bismarck : Keynes : George Carlin : Skeptics : Propaganda  : SE quotes : Language Design and Programming Quotes : Random IT-related quotes :  Somerset Maugham : Marcus Aurelius : Kurt Vonnegut : Eric Hoffer : Winston Churchill : Napoleon Bonaparte : Ambrose Bierce :  Bernard Shaw : Mark Twain Quotes

Bulletin:

Vol 25, No.12 (December, 2013) Rational Fools vs. Efficient Crooks The efficient markets hypothesis : Political Skeptic Bulletin, 2013 : Unemployment Bulletin, 2010 :  Vol 23, No.10 (October, 2011) An observation about corporate security departments : Slightly Skeptical Euromaydan Chronicles, June 2014 : Greenspan legacy bulletin, 2008 : Vol 25, No.10 (October, 2013) Cryptolocker Trojan (Win32/Crilock.A) : Vol 25, No.08 (August, 2013) Cloud providers as intelligence collection hubs : Financial Humor Bulletin, 2010 : Inequality Bulletin, 2009 : Financial Humor Bulletin, 2008 : Copyleft Problems Bulletin, 2004 : Financial Humor Bulletin, 2011 : Energy Bulletin, 2010 : Malware Protection Bulletin, 2010 : Vol 26, No.1 (January, 2013) Object-Oriented Cult : Political Skeptic Bulletin, 2011 : Vol 23, No.11 (November, 2011) Softpanorama classification of sysadmin horror stories : Vol 25, No.05 (May, 2013) Corporate bullshit as a communication method  : Vol 25, No.06 (June, 2013) A Note on the Relationship of Brooks Law and Conway Law

History:

Fifty glorious years (1950-2000): the triumph of the US computer engineering : Donald Knuth : TAoCP and its Influence of Computer Science : Richard Stallman : Linus Torvalds  : Larry Wall  : John K. Ousterhout : CTSS : Multix OS Unix History : Unix shell history : VI editor : History of pipes concept : Solaris : MS DOS :  Programming Languages History : PL/1 : Simula 67 : C : History of GCC development :  Scripting Languages : Perl history   : OS History : Mail : DNS : SSH : CPU Instruction Sets : SPARC systems 1987-2006 : Norton Commander : Norton Utilities : Norton Ghost : Frontpage history : Malware Defense History : GNU Screen : OSS early history

Classic books:

The Peter Principle : Parkinson Law : 1984 : The Mythical Man-Month :  How to Solve It by George Polya : The Art of Computer Programming : The Elements of Programming Style : The Unix Hater�s Handbook : The Jargon file : The True Believer : Programming Pearls : The Good Soldier Svejk : The Power Elite

Most popular humor pages:

Manifest of the Softpanorama IT Slacker Society : Ten Commandments of the IT Slackers Society : Computer Humor Collection : BSD Logo Story : The Cuckoo's Egg : IT Slang : C++ Humor : ARE YOU A BBS ADDICT? : The Perl Purity Test : Object oriented programmers of all nations : Financial Humor : Financial Humor Bulletin, 2008 : Financial Humor Bulletin, 2010 : The Most Comprehensive Collection of Editor-related Humor : Programming Language Humor : Goldman Sachs related humor : Greenspan humor : C Humor : Scripting Humor : Real Programmers Humor : Web Humor : GPL-related Humor : OFM Humor : Politically Incorrect Humor : IDS Humor : "Linux Sucks" Humor : Russian Musical Humor : Best Russian Programmer Humor : Microsoft plans to buy Catholic Church : Richard Stallman Related Humor : Admin Humor : Perl-related Humor : Linus Torvalds Related humor : PseudoScience Related Humor : Networking Humor : Shell Humor : Financial Humor Bulletin, 2011 : Financial Humor Bulletin, 2012 : Financial Humor Bulletin, 2013 : Java Humor : Software Engineering Humor : Sun Solaris Related Humor : Education Humor : IBM Humor : Assembler-related Humor : VIM Humor : Computer Viruses Humor : Bright tomorrow is rescheduled to a day after tomorrow : Classic Computer Humor

The Last but not Least Technology is dominated by two types of people: those who understand what they do not manage and those who manage what they do not understand ~Archibald Putt. Ph.D

The statements, views and opinions presented on this web page are those of the author (or referenced source) and are not endorsed by, nor do they necessarily reflect, the opinions of the Softpanorama society. We do not warrant the correctness of the information provided or its fitness for any purpose. The site uses AdSense so you need to be aware of Google privacy policy. You you do not want to be tracked by Google please disable Javascript for this site. This site is perfectly usable without Javascript.

Last modified: March 12, 2019