Re: PhD Topic suggestions

Kurt Huwig <[email protected]> Wed, 10 Dec 2003 14:52:10 +0100
Newsgroups gmane.comp.security.virus.openantivirus.general
Message-ID <[email protected]>
William Fitzgerald (BH/EEI) wrote:
> Fridrik (Antony),
> 
> I am glad you have something concrete to support your "stupid idea" notion. yes, indeed one of the major factors would be containment of the good virus technology. See my last mail sent to Antony.
> 
> Antony, yes, i agree it would have to be kept local, say within our (Ericsson)OSS and it really wouldn't suceed in global terms.
> 
> Howerver, since we have not come up with a solution to deploying successfully a good virus/virus envelopes just yet, does not mean we will not in the future! so someone will have to create the solution.
> 
> maybe its a bad idea. (i can hear Fridrik grinding his teeth and saying yes it is!)
> 
> ok so, is there any other suggestions of research avenue's?
> 
> what about other areas entirely? maybe security in ambient networks and how to protect them from virues,Dos attacks etc?

I don't get the point of using a virus here. A virus infects binary 
files to propagate. The only use for this is to compress executables 
with something like UPX and use viral technology to access only the used 
files. But this can be achieved much better by explicitly compressing 
the files especially in a corporate environment.

The other thing are worms. You need a security hole for a worm to 
propagate. It might be tempting to use a worm to close the holes, but 
again standard technology is better suited for monitoring of vulnerable 
systems and patching the holes.

Maybe you should dig into something like Red-Code and build a system 
with input/output, let different viruses fight/mutate against each other 
and wait for the speakers saying 'hi dad' :-)

BTW: there was a nice article about evolution within simulated life in 
on of the latest German edition of Scientific American.


Have fun,

Kurt

P.S.: There will be a new release of the scanner this year. I just 
finished rewriting the scan engine...it just started working again.
-- 
Kurt Huwig             iKu Systemhaus AG        http://www.iku-ag.de/
Vorstand               Am Römerkastell 4        Telefon 0681/96751-0
                        66121 Saarbrücken        Telefax 0681/96751-66
GnuPG 1024D/99DD9468 64B1 0C5B 82BC E16E 8940  EB6D 4C32 F908 99DD 9468
signature.asc (application/pgp-signature, 261 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/1yUKTDL5CJndlGgRAvG2AJ9PEDbkTJrH490jG4Ab22Cyy2DiHwCeJ/fL
A5iPZXNnYXorWzWiRKK16FY=
=YFjN
-----END PGP SIGNATURE-----