Re: virus code is never executed - virus or not?]

On Sun, Jan 11, 2004 at 03:15:06PM +0000, Fridrik Skulason wrote:
> Integrity checkers can be somewhat effective against viruses in a static
> environment, where programs are never updated, but that's about it. 

Actually I think integrity checkers have a great potential, _if_ there is a
valid path of trust from the system boot (and no, I don't think TCG is the
right way :-) _and_ it is supported by vendor update procedures. Just some 
checksums won't be sufficient, but software certifiction may be an option.

-- 
Michel Messerschmidt      9messers-jNDFPZUTrfQBEfOqpokbeYV0Y/[email protected]
antiVirusTestCenter, Computer Science, University of Hamburg


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html