You are here: silicon.com > Software > Security Strategy

Security Strategy

'Name and shame virus writers - even the kids,' says expert

Need to make sure they don't get back into 'the water supply'...

Tags: virus

By Will Sturgeon

Published: 6 July 2005 17:22 GMT

A leading antivirus expert has said virus writers must not be afforded the right to anonymity - even if they are minors when they commit their crimes.

This week Sasser writer Sven Jaschan is on trial in Germany and while he is being tried as a minor because he was 17-years-old at the time he committed his crimes, his identity has not been protected.

Dave Rand, chief technologist at Trend Micro, said that is a great result for the antivirus industry and society in general.

Rand believes virus writers' crimes must follow them through their lives because society cannot risk them resurfacing in a position of responsibility - perhaps even charged with protecting the very PCs they would once have compromised.

He said age cannot be an excuse even if they don't quite realise the damage they might be doing.

"If you take a kid who downloads tools from some ftp site and releases a virus, does he understand the repercussions of his actions?"

"I would argue he doesn't," said Rand. "Perhaps on an intellectual level he does but on a practical level I'd say 'no'."

However, ignorance is no defence said Rand and anonymity should not be guaranteed by the courts.

"When it is computer-related crime, it is important their identity is known. We need to know their name and know what they look like," he said, adding that companies have a right to know if they are employing somebody with a history of writing malicious code.

Rand said he would sack anybody "on the spot" if he found out they had been caught writing malicious code in the past.

Controversially, one security company did offer Jaschan a job despite being aware of all the facts. And it was an offer the teenager took up. But Rand isn't convinced they will even get value for money from employing a virus writer.

"There is a very different level of work and knowledge required to release a professional product to that required to write malicious code," said Rand, suggesting virus writers may not be as well-suited to jobs in the security industry as some believe.

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

Bob Tarzey Why you must rein in your power users When they do damage, it can be catastrophic to your business

Jon Collins Is losing a mobile device really such a big deal? How to minimise the damage to your business


  • Jobs
Network Support 21-23k - Trowbridge

Being part of this group means that we are part of a global organisation, employing 90,000 people across all five continents of the world. Due to ...

Report Writer- Corvu, Corbusiness

We are working on behalf of an expanding organisation that is looking to recruit a permanent Corvu Report Writer. You will be responsible for writing ...

Technical writer required in Belfast DX1515

Skills: To apply for this position you will need previous experience as a technical writer.You must be able to assimilate and to transmit technical ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: