Malware nomenclature

Question

If there a generally agreed upon naming convention for types of malware/virus? For example, are there agreed upon terms for virus, trojan, worm and the like?

If one exists could someone explain it or link to an explaination?

score 4 · Accepted Answer · edited Feb 01 '11 at 11:35

4

As far as I'm aware there is no universal naming convention, only vendor-specific conventions.

For instance:

McAfee: http://home.mcafee.com/VirusInfo/Glossary.aspx
Symantec: http://www.symantec.com/security_response/virusnaming.jsp
Sophos: http://www.facebook.com/note.php?note_id=13314014671

Each vendor has their own particular convention, but a lot of them to overlap.

edited Feb 01 '11 at 11:35

answered Jan 31 '11 at 18:35

Steve

15,215
3
38
66

1

Yes, that _is_ a facebook link :(. But it really is to Sophos' glossary. – Feb 01 '11 at 11:35

score 3 · Answer 2 · answered Feb 01 '11 at 13:10

Roughly, according to me:

a virus got onto your system because it was 'carried' by something else;
a worm got onto your system because it found a vulnerability in a network service on your system;
a trojan got onto your system because you were duped into thinking it was a legitimate program and installed it

So this axis of classification is about how the malware is spread.

Once on your system, it doens't make much difference what sort of malware they are, although they are then more usefully classified by what they do: spyware, adware, etc.

score 1 · Answer 3 · answered Feb 01 '11 at 13:59

1

Have a look at

http://www.wildlist.org/faq.htm#naming

http://www.wildlist.org/naming.htm

http://www.people.frisk-software.com/~bontchev/papers/naming.html

answered Feb 01 '11 at 13:59

symcbean

18,418
40
74

Link-only answers have the nasty habit of accumulating link rot. The third link you provided is down. – forest Feb 16 '18 at 05:57

Malware nomenclature

3 Answers3

Linked