[governance] OECD ministerial background report on Malware

[Suresh Ramasubramanian]

Yes, I saw an initial draft of that, and some other tu-delft work that
preceded this paper. Impressive.

Of course, one issue they had (and who doesnt) was that most of the
statistics they're forced to rely on are vendor provided. There's almost
nothing else usable - barring, say, the MAAWG metrics report available at
http://www.maawg.org .. which was started as a consequence of the OECD
antispam task force's call for unbiased spam metrics

If you are interested in further work on this, there are several papers by,
for example, Uni-Mannheim's Thorsten Holz, that should be of interest.

	srs

Brenden Kuerbis [03/06/08 09:58 -0400]:
>Thanks for pointing this out Suresh.  For those interested in the
>underlying science upon which much of the Ministerial Report was
>based, I recommend taking a look at the recently released OECD study,
>"Economics Of Malware: Security Decisions, Incentives and
>Externalities", co-authored by IGP Scientific Committee member Michel
>van Eeten and Johannes Bauer.
>
>http://www.oecd.org/dataoecd/53/17/40722462.pdf
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.cpsr.org
To be removed from the list, send any message to:
     governance-unsubscribe at lists.cpsr.org

For all list information and functions, see:
     http://lists.cpsr.org/lists/info/governance