How about a sandboxed "worm interpreter" that allows anti-worms to follow the same migration path as worms, test for their target vulnerabilities, then alert the admin and a trusted third party?
It's a half-baked idea, but some kind of automation is going to have be used to account for lazy/untrained/non-existent admins, which seem to be the majority. Sooner or later, a worm like Code Red is going to get vicious, and I'd hate to lose the use of the net for any significant period of time because a bunch of poorly-maintained, infected PCs go on a rampage.
P.S. I'm thinking this system could work if offered as a service, where the customer could request various degress of response from the provider, including notifying management, send patch notices, etc.
In reply to Re: So I have this crazy idea about an 'anti-virus virus'
by converter
in thread So I have this crazy idea about an 'anti-virus virus'
by E-Bitch
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |