R. Skorupka kindly wrote:

>The same reasons can be used in Windows or Unix (&Linux) world. But we know 
>many cases documented. What's the reason?

Good question! Perhaps platform inherent weakness? Anyone got a better answer?


>Why we don't know any virus for z/OS? Is the security by obscurity so 
>effective?

There were malicious software on MVS and such old systems. Think Christmas 
'virus' for example. It is actually a worm, AFAIK, but still malicious.


Fact is: you can *in theory* write a virus, worm, trojan or similar software in 
any language on any platform including z/OS, provided you can hijack [1] the 
system services to accomplish you nefarious deeds.

I think, in my opinion, the embarrasment factor is too high for such cases of 
'virus on z/OS' to be divulged...

Still, my biggest problem are *insiders* (from cleaners all the way up to 
'top-brass') who tried to do [or arrange to do]  fraudulant transactions...

There is only one [ impractical! ;-D ] way to protect a computer - turn it off! 
:-)

Groete / Greetings
Elardus Engelbrecht

[1] - Bypass APF, bypass RACF, ignoring change managament processes, use 
bribery, do copies from your sandbox into your production, use FTP, capture 
data with keystroke logger + screen scrapers, etc.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to