Malware - Whom or What Are We Fighting
•
0 likes•214 views
When characterizing ill-effects of malicious software, it’s too easy to focus on malware itself, forgetting that behind this tool are people that create, use and benefit from it. The best way to understand the threat of malware is to consider it within the larger ecosystem of computer fraud, espionage and other crime.
![Malware: Whom or What Are We Fighting?[1]
When characterizing ill-effects of malicious software, it’s too easy to focus on malware
itself, forgetting that behind this tool are people that create, use and benefit from it.
The best way to understand the threat of malware is to consider it within the larger
ecosystem of computer fraud, espionage and other crime.
A Tip of a Spear
I define malware[2] as code that is used to perform malicious actions. This implies that
whether a program is malicious depends not so much on its capabilities but, instead,
on how the attacker uses it.
Sometimes malware is compared to a tip of a spear—an analogy that rings true in many
ways, because it reminds us that there is a person on the other end of the spear. This
implies that information security professionals aren’t fighting malware per se. Instead,
our efforts contribute towards defending against individuals, companies and countries
that use malware to achieve their objectives.](https://image.slidesharecdn.com/malwarewhomorwhatarewefighting-140303175606-phpapp02/85/Malware-Whom-or-What-Are-We-Fighting-1-320.jpg?cb=1393869423)
![Understanding the Context
Without the work of personnel that handles technical aspects of malware infections,
the malware-empowered threat actors would be unencumbered. Yet, these tactical
tasks need to be informed by a strategic perspective on the motivations and operations
of the individuals that create, distribute and profit from malware.
To deal with malware-enabled threats, organizations should know how to detect,
contain and eradicate infections, but we cannot stop there. We also need to also
understand the larger context of the incident. We won’t be able to accomplish this
until we can see beyond the malicious tools to understand the perspective of our
adversaries. The who is no less important than the what.
— Lenny Zeltser[3]
1. http://blog.zeltser.com/post/76215272596/malware-whom-or-what-are-we-fighting
2. http://blog.zeltser.com/post/1242534217/what-is-malware
3. http://zeltser.com/](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
More Related Content
More from Vision Concepts Infrastructure Services Solution
More from Vision Concepts Infrastructure Services Solution (20)
Recently uploaded
Recently uploaded (20)
Malware - Whom or What Are We Fighting
- 1. Malware: Whom or What Are We Fighting?[1] When characterizing ill-effects of malicious software, it’s too easy to focus on malware itself, forgetting that behind this tool are people that create, use and benefit from it. The best way to understand the threat of malware is to consider it within the larger ecosystem of computer fraud, espionage and other crime. A Tip of a Spear I define malware[2] as code that is used to perform malicious actions. This implies that whether a program is malicious depends not so much on its capabilities but, instead, on how the attacker uses it. Sometimes malware is compared to a tip of a spear—an analogy that rings true in many ways, because it reminds us that there is a person on the other end of the spear. This implies that information security professionals aren’t fighting malware per se. Instead, our efforts contribute towards defending against individuals, companies and countries that use malware to achieve their objectives.
- 2. Understanding the Context Without the work of personnel that handles technical aspects of malware infections, the malware-empowered threat actors would be unencumbered. Yet, these tactical tasks need to be informed by a strategic perspective on the motivations and operations of the individuals that create, distribute and profit from malware. To deal with malware-enabled threats, organizations should know how to detect, contain and eradicate infections, but we cannot stop there. We also need to also understand the larger context of the incident. We won’t be able to accomplish this until we can see beyond the malicious tools to understand the perspective of our adversaries. The who is no less important than the what. — Lenny Zeltser[3] 1. http://blog.zeltser.com/post/76215272596/malware-whom-or-what-are-we-fighting 2. http://blog.zeltser.com/post/1242534217/what-is-malware 3. http://zeltser.com/