A newly unleashed Internet worm is crowned the 'worst ever' in history. E-mail gateways are deluged with traffic. System administrators frantically disinfect computer systems. Software makers' support staffers are overwhelmed with inquiries from angry customers taken away once again from their daily work. Hearing a familiar story?
The virtual chaos MyDoom spurred swiftly translated into panic that further pumped up fears into the real world. But amid the doom and gloom the virus bred into homes and offices worldwide, there were a couple of businesses where
delight was the word of the day.
In a BBC Science
special report published in 2002, the regular virus author is described as a 14-26 year old male who either wants to prove his programming skills or demonstrate he could cause devastation on a large scale. This is most probably true, but the conclusions for perfunctory analyses of this type are largely drawn from information gleaned from cases of caught or at least known virus authors. With several exceptions, these creators of malicious computer programs did a poor job on both hiding their traces and developing the programs themselves. This very fact serves to say that virus writing ain't certainly an enthusiast's activity, but those caught so far had been merely young enthusiasts.
Follow the money
For years, there has been this theory, although some prefer calling it a myth, that antivirus software vendors were the ones that created computer viruses, in order to establish sufficient indispensability of their services. In 2003, Gene Hodges, president of Network Associates,
told Silicon.com that if this theory were true "we would lose so much trust... It would only take word to get out -- and it would get out -- and it would be 'goodbye' to our customers as they all move over to [...] our rivals."
Maybe Mr. Hodges is right, but his opinion should not stray the thoughtful analyst from the pragmatic leads left by the green bag. With the 'worst ever' worm, or rather with the resounding ramifications of its outbreak, still fresh in the memory, the industry should consider the unique role of the companies offering antivirus products.
On one hand, the security software maker is the only beneficiary of critical situations like the one that arose from MyDoom's worldwide spread. Of course, this viewpoint cannot and should not be considered unilaterally. Carole Theriault, a security consultant at Sophos, rightfully noted inadequate reaction could drive customers out. "Short-comings in technical support, customer service, or quality of software are always unacceptable, and customers are least likely to overlook them during a virus outbreak," she told Svetlozar Online.
Yet security software vendors are attracting most customers when a major virus starts hitting millions of systems across the globe. Computer viruses flood inboxes, launch denial of service attacks, open dangerous computer backdoors, but what they do most is spread fear -- the golden necessity upon which billion-dollar corporations like Symantec, Network Associates, Trend Micro and others build their business.
On the other hand, there are two major reasons against going after the money-strewn path. First of all, social morale easily permeates the corporate setting. As policemen don't commit crimes to create work for themselves, so don't virus researchers make viruses to suffice the need for their jobs. Secondly, and more importantly, there is a high potential for a conspiracy of this scale to get out and obliterate whole companies from the sector. Plus, having information on such activities could prove a powerful weapon for blackmailing the masterminds.
Some sympathize with the money theory, while others shrug it off without reservations. Perhaps being at one of those camps bereaves you from the possibility to objectively assess the situation. Although creating computer viruses is a crime in many countries, it is certainly much more easier to commit than real-life felonies. On top of that, the companies combating these menaces dine on the fear and destruction major virus attacks bring upon consumers and businesses worldwide. They fight the virtual threats, but if they fight them too well, they may eventually destroy the core of their business edifice.
Isn't this enough for going after the money? Or are they actually fearing of leaks that have the potential to take them down. Who knows... But what we DO know is that MyDoom didn't bring gloom to everybody. For some it was and continues to be a golden opportunity.
