[comp.os.vms] Investigation of viruses on VAX-11 and Sun

tmpspa@eua4.ericsson.se (Stefan Parmark) (07/07/88)

I am investigating the possibilities to improve the security in
Ellemtel's internal computer networks. Previously department TE was
connected to Usenet via a phone modem. When they became aware of the
danger with viruses and trojan horses they 'cut' that connection.
To reach Usenet, I had to use a VAX from another department here.

TE has at its disposal a VAX 11/750 with 4.3 BSD Unix and two Sun 3's
with Sun Unix 4.2, which all are connected through an Ethernet.

In order to investigate the dangers of viruses, I tried to write one
myself, thereby being able to study its behaviour under controlled
conditions (of course !!). Unfortunately my efforts have not been
very successful yet.

If anyone has any experience with this, either on VAX or Sun, I would
be grateful for anything you could contribute with. Any source codes,
preferably in C or Assembler, are highly appreciated.

If you consider the information to delicate to spread on Usenet, you
are welcome to send me a private mail instead. After all, my job is not
to spread the knowledge of viruses to everyone, but to find a cure
for them.

tmpspa@eua4.ericsson.se
Stefan Parmark
Ellemtel
[lvsj|
Sweden

A.Eric@GSB-WHY.Stanford.EDU (Eric M. Berg) (07/11/88)

    In order to investigate the dangers of viruses, I tried to write one
    myself, thereby being able to study its behaviour under controlled
    conditions (of course !!). Unfortunately my efforts have not been
    very successful yet.
    
    If anyone has any experience with this, either on VAX or Sun, I would
    be grateful for anything you could contribute with. Any source codes,
    preferably in C or Assembler, are highly appreciated.
    
    If you consider the information to delicate to spread on Usenet, you
    are welcome to send me a private mail instead. [....]


"I'm trying to write a virus, but I can't.  So please send me one.  So that
I can improve our security here.  Really, it's for a good cause."

Right.  I assume that no one who reads INFO-VAX will be silly enough to
respond positively to this request.

						Eric M. Berg
						Computer Facility
						Graduate School of Business
						Stanford University
-------