An analysis of computer virus construction, proliferation, and control

The primary problem addressed by this research is that computer viruses are not well understood or even well defined outside of a small number of computer professionals. Given this premise, it cannot be expected that people outside of that circle understand the risks of, or the protection available against computer virus infection. This research establishes that computer viruses are indeed a threat to the computing community. The extent of this threat can only be determined by evaluating many different factors. These factors include the relative ease with which a computer virus can be written, the motivation involved in writing a computer virus, the damage and overhead incurred by infected systems, and the legal implications of computer viruses, among others. This question of technical difficulty is addressed through the design and coding of a simple computer virus. The virus is then examined to reveal its methods of propagation. Next, various virus containment methodologies are examined that can prevent the spread of the virus. Finally, the virus is studied from the standpoint of a user who has isolated the virus and is attempting to discover how the virus operates. Recommendations are also made to assist computer users in preventing infection by computer viruses. These recommendations support solid general computer security practices as a means of combating computer viruses. Based upon the research, the development of a computer virus seems to require more persistence than technical expertise. This is a frightening proclamation to the computing community. The education of computing professionals on the dangers that viruses pose to the welfare of the computing industry as a whole is stressed as a means of inhibiting the current proliferation of computer virus programs.