scott nous apporta ses lumieres en ce 2008/01/08 11:09:
>> The cycle goes like this:
>>
>> 1. Destructive virus is released.
>>
>> 2. It takes 72 hours for any AV companies to even notice it exists, 
>> much less obtain a useable sample for analysis.
>>
>> 3. It takes another 72 hours to analyse the virus and develop a virus 
>> definition for it.
>>
>> 4. The new definition is deployed.
>>
>> 5. Our server downloads and applies the definition.
>>
>> My point is, that's 144 hours between the virus being released and the 
>> virus definition being released. An extra 24 hours before the server 
>> picks up the new definition seems quite trivial by conparison. The 
>> virus has already had plenty of time to wreck your entire network, 
>> long before the AV vendor has anything to offer you...
> 
> Probably not, as I doubt the person who released the virus aimed it 
> straight at your network.  Likely it took several days to build up 
> worldwide before it got into your network somehow.
> 
The worst virus out there are made to target one or only a few companies. They 
are made to remain under the AV radars by limiting ther diffusion.
Very slow propagation to keep a minimal network impact. Very few machines 
infected every day or weeks, with a relatively low stop therhold. But, as they 
target juicy targets, the payof can be prety impressive.

-- 
Alain
-------------------------------------------------
You know you've been raytracing too long when you downloaded and printed the 
Renderman Interface documentation, so you'd have a little light reading to take 
on holiday.
Alex McLeod a.k.a. Giant Robot Messiah

Post a reply to this message