A clinical study of risk factors related to malware infections
A clinical study of risk factors related to malware infections
复制标题
恶意软件感染相关危险因素的临床研究
DOI：
--
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Anil Somayaji
中科院分区：
文献类型：
--
作者：
F. Lévesque;J. Nsiempba;José M. Fernandez;Sonia Chiasson;Anil Somayaji
恶意软件的成功取决于技术和人为因素。最有安全意识的用户容易受到零日漏洞的攻击;最好的安全机制可以通过糟糕的用户选择来规避。虽然已经有大量的研究解决了恶意软件攻击和防御的技术方面，但关于人类行为如何与恶意软件和当前恶意软件防御交互的研究报告要少得多。在本文中，我们描述了一个概念验证领域的研究，旨在研究用户之间的相互作用，反病毒（反恶意软件）软件，恶意软件，因为它们发生在部署的系统。这项为期4个月的研究以类似于用于评估医疗干预措施的临床试验的方式进行，涉及50名受试者，他们的笔记本电脑被用于监测可能的感染并收集用户行为数据。虽然人口规模有限，但这项初步研究对当前防御的有效性产生了一些有趣的，非直观的见解，特别是在最终用户的技术复杂性方面。我们断言，这项工作表明了通过长期实地研究测试安全软件的可行性和实用性，其生态有效性比通过其他手段可以实现的。
The success of malicious software (malware) depends upon both technical and human factors. The most security conscious users are vulnerable to zero-day exploits; the best security mechanisms can be circumvented by poor user choices. While there has been significant research addressing the technical aspects of malware attack and defense, there has been much less research reporting on how human behavior interacts with both malware and current malware defenses. In this paper we describe a proof-of-concept field study designed to examine the interactions between users, anti-virus (anti-malware) software, and malware as they occur on deployed systems. The 4-month study, conducted in a fashion similar to the clinical trials used to evaluate medical interventions, involved 50 subjects whose laptops were instrumented to monitor possible infections and gather data on user behavior. Although the population size was limited, this initial study produced some intriguing, non-intuitive insights into the efficacy of current defenses, particularly with regards to the technical sophistication of end users. We assert that this work shows the feasibility and utility of testing security software through long-term field studies with greater ecological validity than can be achieved through other means.