Throwback Thursday: I say Virus, You say Trojan

Posted by   Virus Bulletin on   Jan 14, 2016

This Throwback Thursday, VB heads back to 1998 — a time when anti-virus vendors avoided tackling non-replicating trojans, worms, jokes and corrupted files.

Today, the idea of security vendors not tackling trojans or other forms of malware seems absurd, yet back in the 90s, anti-virus vendors argued that because, by definition, they developed anti-virus, and not anti-trojan or anti-malware software, it was not in their remit to devote their attention anything other than viruses.

In January 1998, VB's then Technical Editor Jakub Kaminski penned an editorial piece looking at the importance, given this situation, of language and classification and of being able to reach an agreement on the definitions of a virus, a trojan, etc. — especially with the advent of pieces of malware for which there were more than enough reasons to categorize at least some of them as viruses, yet at the same time, also legitimate arguments to classify them as trojans or even worms. While anti-virus researchers generally felt strongly about wanting to do things right and not compromising their principles, Jakub argued that, sometimes, adhering to one's principles makes it difficult to provide the clear answers and simple solutions required by users.

Read Jakub's editorial here in HTML-format, or download it here as a PDF.

Posted on 14 January 2016 by Helen Martin



Latest posts:

NCSC gives important advice on lateral movement

The UK's National Cyber Security Centre (NCSC) has provided helpful and practical advice on preventing and detecting lateral movement by an attacker within a network.

What kind of people attend Virus Bulletin conferences?

If you are considering submitting a proposal for a talk to VB2018 and you're not familiar with the event, you may find it useful to know what kind of people attend the conference.

Olympic Games target of malware, again

An unattributed malware attack has disrupted some computer systems of the 2018 Winter Olympics. In 1994, a computer virus also targeted the Winter Olympics.

There are lessons to be learned from government websites serving cryptocurrency miners

Thousands of websites, including many sites of government organisations in the UK, the US and Sweden, were recently found to have been serving a cryptocurrency miner. More interesting than the incident itself, though, are the lessons that can be…

We need to continue the debate on the ethics and perils of publishing security research

An article by security researcher Collin Anderson reopens the debate on whether publishing threat analyses is always in the public interest.