Re: Re: virus code is never executed - virus or not?]
Antony Stone <Antony-E2RgWYyNWflCkLs28/y7ANBc4/[email protected]> Sun, 11 Jan 2004 12:06:17 +0000
| Newsgroups | gmane.comp.security.virus.openantivirus.general |
|---|---|
| Message-ID | <[email protected]> |
On Sunday 11 January 2004 2:04 pm, Fridrik Skulason wrote:
> 3) If the virus code does not get executed, the ideal behaviour would
> be to report the program as corrupted by the "so-and-so" virus,
> but failing to report the virus at all, or allowing the program
> to execute is not really a "failure" as such... there is no active
> virus in the program.
How do you know whether the virus code gets executed without performing an
exhaustive test on what the entire code does under all input conditions?
I think it is not possible to say for certain "this code (does | will) not get
exectued" (this is the sort of thing proved by Turing and Church quite some
time ago), therefore if viral code is found it should be reported as such.
Antony.
--
If at first you don't succeed, destroy all the evidence that you tried.
Please reply to the list;
please don't CC me.
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html