Understanding the Impact of Reports Published by the Cyber Security Industry on the Adaptation of Malware Designs

• In Event: The Application of Computer Technology to Crime and Criminal Justice

Abstract

Cybercriminals are creating and developing schemes to benefit from online resources, particularly financially. In a virtual world, this is often done through malware, which is not only one of the most important elements of online based criminality (Taylor et al., 2006) but also one of the most rapidly evolving. Malware includes, among other types of malicious programs, computer viruses, worms, and Trojan horses that alter the way a computer functions (Holt & Bossler, 2009). This study looks at whether reports published by the cyber security industry have an effect on the way malware changes from one version to another. Five malwares were analyzed, with changes from the original to the edited versions plotted on a timeline. This comparison was matched with the time of release of industry reports on malware. Results show a correlation between the changes made to the malware and the characteristics discussed in the industry reports. In conclusion, we discuss the relationship between exposing a threat and offering protection against it and the ethical issues that may rise.

Authors

• Marie-Ève Royer-Laliberté, Université de Montréal

• Francis Fortin, Université de Montréal

• Masarah Cynthia Paquet Clouston, GoSecure Inc.