Messages in this thread | | | Subject | RE: [malware-list] TALPA - a threat model? well sorta. | Date | Fri, 15 Aug 2008 12:30:24 -0400 | From | "Press, Jonathan" <> |
| |
> -----Original Message----- > From: david@lang.hm [mailto:david@lang.hm] > Sent: Friday, August 15, 2008 12:25 PM > To: Press, Jonathan > Cc: Peter Zijlstra; Helge Hafting; linux-kernel@vger.kernel.org; malware- > list@lists.printk.net; hch@infradead.org; andi@firstfloor.org; > viro@ZenIV.linux.org.uk; alan@lxorguk.ukuu.org.uk; Arjan van de Ven > Subject: RE: [malware-list] TALPA - a threat model? well sorta.
> > The problem is that you have to account for the cases where the malware > > made it onto the system even if you were trying to catch it ahead of > > time. For example: > > > > - Administrator turns off or reduces AV protection for some reason for > > some period of time. It happens all the time. > > according to the threat model actions of the administrator do not matter.
Sorry, I don't know what you mean.
Jon
| |