_it E d e it s io w n o Computer Viruses and Other Malicious r yl Software B n O O e D A THREAT TO THE INTERNET ECONOMY da l C u The Internet has become a powerful tool for enhancing innovation and productivity. E e e Nevertheless, the increasing dependence on the Internet and other communication O R s networks means the Internet has also become a popular and efficient way to spread n e computer viruses and other types of malicious software (malware). A r tu Malware attacks are increasing in both frequency and sophistication, thus posing a L e c serious threat to the Internet economy and to national security. Concurrently, efforts to fight malware are not up to the task of addressing this growing global threat; malware Software Malicious Other and Viruses Computer Computer Viruses and response and mitigation efforts are essentially fragmented, local and mainly reactive. A wide range of communities and actors – from policy makers to Internet Service Other Malicious Software Providers to end users – all play a role in combating malware. But there is still limited knowledge, understanding, organisation and delineation of the roles and responsibilities A THREAT TO THE INTERNET of each of these actors. Improvements can be made in many areas, and international ECONOMY co-operation would benefit greatly in areas such as: proactive prevention (education, guidelines and standards, research and development); improved legal frameworks; E-COMMERCER THIRD FOURTH FIFTH FIRST SECOND THIRD FOURTH FIFTH FIRST SECOND THIRD FOURTH FIFTH FIRST stronger law enforcement; improved tech industry practices; and better alignment of CYBERCRIME SECURITY E-COMMERCE THIRD SECOND FIRST FIFTH FOURTH THIRD SECOND FIRST FIFTH FOURTH THRID SECOND FIRST FIFTH FOURTH economic incentives with societal benefits. SECURITY CYBERCRIME E-COMMEMMIRST SECOND THIRD FOURTH FIFTH FIRST SECOND THIRD FOURTH FIFTH FIRST S This book is a first step toward addressing the threat of malware in a comprehensive, SECURITY E-COMMERCE CYBERCRIME SECURITYIRST FIFTH FOURTH THIRD SECOND FIRST FIFTH FOURTH FIFTH FOURTH THIRD SECOND FIRST FIFTH global manner. It has three major aims: 1) to inform policy makers about malware – its CYBERCRIME E-COMMERCE SECURITY CYBERRATIVE WEB FIFTH FIRST SECOND THIRD FOURTH FIFTH FIRST SECOND growth, evolution and countermeasures to combat it; 2) to present new research into E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY the economic incentives driving cyber-security decisions; and 3) to make specific E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME suggestions on how the international community can better work together to address SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME the problem. SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SEC E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME A THREAT TO THE INTERNET ECONOMY INTERNET THE TO THREAT A E-COMMERCE CYBERCRIME SECURITY E-COMMERCE The full text of this book is available on line via these links: www.sourceoecd.org/governance/9789264056503 www.sourceoecd.org/scienceIT/9789264056503 Those with access to all OECD books on line should use this link: www.sourceoecd.org/9789264056503 SourceOECD For more informationis the aboutOECD this online award-winning library of books, service periodicals and free andtrials, statistical ask your databases. librarian, or write to us at [email protected] . CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-C SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SEC CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-C www.oecd.org/publishing E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE ISBN 978-92-64-05650-3 SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMME 93 2009 01 1 P SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-COMMERCE CYBERCRIME SECURITY E-CC CYBERCRIME E-COMMERCE SECURITY CYBERCRIME E-COMMERCE SECURITY -:HSTCQE=UZ[ZUX: E COMMERCE CYBERCRIME SECURITY E COMMERCE CYBERCRIME SECURITY E COMME - - - E-COMMERCE SECURITY CYBERCRIME E-COMM CYBERCRIME SECURITY E-COMMERCE CYB-C SECURITY E-COM ��� � � � �� � �� � � � � �� � � �� � � �� � � � � � � � � � � � � � � � � � � About OECD Browse_it editions In a traditional bookshop you can browse the display copies from cover-to-cover, free of charge. Wouldn’t it be good to be able to do the same online? Now you can. OECD’s Browse_it editions allow you to browse our books, online, from cover-to-cover. But, just as in a real bookshop where you can’t take or copy pages from the books on display, we’ve disabled the print and copy functions in our Browse-it editions - they’re read-only. And, just as in a real bookshop, you may choose to buy or borrow from a library some titles you’ve browsed, so we hope you’ll buy or borrow our books when they meet your needs. Tell us what you think about our Browse-it service, write to us at [email protected]. Buying OECD Publications You can purchase OECD books and e-books from our Online Bookshop - www.oecd.org/bookshop where, if you purchase printed editions you can download the e-book edition free of charge. Our books are also available from a network of distributors, click the ‘Distributors’ button on this website: www.oecd.org/ publications/distributors to fi nd your nearest OECD publications stockist. OECD Publications in Libraries You’ll fi nd OECD publications in many institutional libraries around the world, especially at universities and in government libraries. Many subscribe to the OECD’s own e-library, SourceOECD. SourceOECD provides online acess to our books, periodicals and statistical databases. If your institutional library does not yet subscribe to SourceOECD, tell your librarian about our free three-month trial offer. For more details about SourceOECD visit http://new.SourceOECD.org or email [email protected] itoryLibrariesineachMembercountrywhereallOECDprintedpublicationsareavailableforconsultation-www.oecd. org/deposoitorylibraries for a list. _it E d e it s io w n o r yl B n O O e D ad l C u E e e O R s n e A r u L e c t _it E d e it s io w n o r yl B n O O e D da l C u E e e O R s n e A r u L e c t Faux-titre.fm Page 1 Thursday, February 19, 2009 1:25 PM Computer Viruses and Other Malicious A THREAT TO THE INTERNET ECONOMY Software Faux-titre.fm Page 2 Thursday, February 19, 2009 1:25 PM _it E d e it s io w n ORGANISATION FOR ECONOMIC CO-OPERATIONo r yl AND DEVELOPMENTB n O O e D The OECD is a unique forum where the governments of 30 democraciesda work l together to address the economic, social and environmentalC challenges of globalisation. u E e e The OECD is also at the forefront of efforts to understand and to help governments O R s respond to new developments and concerns, such as corporate governance, the n e information economy and the challenges of an ageing population.A The Organisationr tu provides a setting where governments can compare policy experiences, Lseeke answersc to common problems, identify good practice and work to co-ordinate domestic and international policies. The OECD member countries are: Australia, Austria, Belgium, Canada, the Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Japan, Korea, Luxembourg, Mexico, the Netherlands, New Zealand, Norway, Poland, Portugal, the Slovak Republic, Spain, Sweden, Switzerland, Turkey, the United Kingdom and the United States. The Commission of the European Communities takes part in the work of the OECD. OECD Publishing disseminates widely the results of the Organisation’s statistics gathering and research on economic, social and environmental issues, as well as the conventions, guidelines and standards agreed by its members. This work is published on the responsibility of the Secretary-General of the OECD. The opinions expressed and arguments employed herein do not necessarily reflect the official views of the Organisation or of the governments of its member countries. Corrigenda to OECD publications may be found on line at: www.oecd.org/publishing/corrigenda. © OECD 2009 You can copy, download or print OECD content for your own use, and you can include excerpts from OECD publications, databases and multimedia products in your own documents, presentations, blogs, websites and teaching materials, provided that suitable acknowledgment of OECD as source and copyright owner is given. All requests for public or commercial use and translation rights should be submitted to [email protected]. Requests for permission to photocopy portions of this material for public or commercial use shall be addressed directly to the Copyright Clearance Center (CCC) at [email protected] or the Centre français d'exploitation du droit de copie (CFC) [email protected]. _it E d e FOREWORDit – 3 s io w n o r yl B n O O e D da l C u Foreword E e e O R s n e A r tu Addressed primarily to policy makers, this book was developedL e overc the course of 2007, by the OECD Working Party on Information Security and Privacy (WPISP) in partnership with the Asia Pacific Economic Co- operation Telecommunication and Information Working Group (APEC TEL) Security and Prosperity Steering Group (SPSG).