<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Computers under attacks !</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>A. Bonfante</string-name>
          <email>anne.bonfante@libertysurf.fr</email>
        </contrib>
        <contrib contrib-type="author">
          <string-name>J-Y Marion</string-name>
          <email>Jean-Yves.Marion@loria.fr</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Loria, Calligramme project</institution>
          ,
          <addr-line>B.P. 239, 54506 Vand3⁄4uvre-lμes-Nancy C</addr-line>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>erieure des Mines de Nancy</institution>
          ,
          <addr-line>INPL</addr-line>
          ,
          <country country="FR">France</country>
        </aff>
      </contrib-group>
      <fpage>765</fpage>
      <lpage>770</lpage>
      <abstract>
        <p>The war metaphor seems to establish itself as soon as we deal with computer viruses. The concept of war is a central topic of political philosophy. The relationships between "hackers" and "crackers" and information technology world are based on power relations, whose issues are politic, economic and epistemological. We wonder whether the computer disease phenomenon is a modern representation of the war and the relationships of power, as it is suggested in Foucault from Les Mots et Les Choses. So, it is legitimate to compare the aspects of this war with the classical analyses of war, which in the literature are founded by the classical Greco-Roman philosophers, or the modern ones such as Machiavelli or Clausewitz.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>Introduction</title>
      <p>
        The war metaphor seems to establish itself as soon as we deal with
computer viruses. First of all the lexicon shows it : we talk of "viral attack",
"target", "trojan horse", "worms" or yet of "malware" which is a blend
word obtained by contracting "malicious" and "software". Similarly, we
¯nd phrase like "programs with an o®ensive nature" in Filiol's book [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ]
to characterize viruses. The concept of war is a central topic of
political philosophy. The relationships between "hackers" and "crackers" and
information technology world are based on power relations, whose issues
are politic, economic and epistemological. We can ask whether the
computer disease phenomenon is a modern representation of the war and the
relationships of power, as it is suggested in Foucault [
        <xref ref-type="bibr" rid="ref5">5</xref>
        ] from Les Mots
et Les Choses. So, it is legitimate to compare the aspects of this war
with the classical analyses of war, which in the literature are founded
by the classical Greco-Roman philosophers, or the modern ones such as
Machiavelli or Clausewitz. Thus, we compare ¯rstly the di®erent
o®ensive and defensive strategies of computer viruses with military strategy
as anyone encounters in classical treatise on the "art of war". Secondly,
we study the phenomenon of computer viruses from the political and
ethic point of view: does the struggle between hackers and users
correspond to the known categories of the moral of war, which was described
in the Deuteronomy? Is a new type of political relations emerging from
this ¯ght? Lastly, if we consider that viruses represent a new modern
vision of warfare, the problematic, which dominates this phenomenon, is to
know whether the hackers, which create viruses, express a kind of
libertarian claims inside a system (which implies that they become heroic or
romantic players and explains the fascination with them); or they
represent a threat of a new totalitarianism, unpredictable and threatening the
freedom of each individual user, which is facing to arbitrary (Arendt [
        <xref ref-type="bibr" rid="ref2">2</xref>
        ]).
2
      </p>
    </sec>
    <sec id="sec-2">
      <title>Typology of computer attacks: the war strategies</title>
      <p>
        The aim is to classify the di®erent strategies used by viruses to attack
a system, and to compare them with the classical strategy described
in Machiavelli [
        <xref ref-type="bibr" rid="ref7 ref8 ref9">8, 7, 9</xref>
        ] and Clausewitz [
        <xref ref-type="bibr" rid="ref13">13</xref>
        ]. In the following discussion,
viruses are identi¯ed as armed forces in motion.
2.1
      </p>
      <sec id="sec-2-1">
        <title>Invasion</title>
        <p>The objective of some category of viruses is to occupy a system, like a
territory invasion, but without the will to destroy the system. Take for
example the worm "I love you", which aims to spread itself through mail
server in 1999 and infects 45 billions of computers, illustrates the case of
a paci¯c invasion.
2.2</p>
      </sec>
      <sec id="sec-2-2">
        <title>Conquest</title>
        <p>The target of some attacks are what we should name by analogy "the
government" or yet "the elites" of a given territory. This kind aggression is
severe and for example the virus CIH can destroy computer motherboard.
The cost of this attack is of approximately 250 billions of euros for South
Korea. A complete analogy would be the one of a computer attack which
takes control of a system.
2.3</p>
        <p>\Rape" strategy
In some case, a virus is an identity that enslaves an host to carry out
replicating operations that brings new mutant copies into being, which are
then free to go o® and enslave further hosts, and so on. These reproduction
methods recall the rape campaign. Here again, the CIH virus is a typical
example of this strategy, which infects executable ¯les.
2.4</p>
      </sec>
      <sec id="sec-2-3">
        <title>Espionage</title>
        <p>A strategy that treatises on art of war advice, is to use spies to know
a foe or to determine the strength of a potential target. Machiavelli is
quite explicit on this subject. The espionage activity is a part of
computer infections, and is performed by "spyware". For example the family
CoolWebSearch of spywares are employed to obtain personal data.
2.5</p>
      </sec>
      <sec id="sec-2-4">
        <title>Hidden moves</title>
        <p>By hidden moves, we mean all the techniques, which consist in protecting
a virus by hiding itself from anti-virus software. There are various
methods and we can mention like polymorphic or metamorphic such as Zmist
virus.
2.6</p>
      </sec>
      <sec id="sec-2-5">
        <title>Fortress</title>
        <p>
          The trusted computing platform (TCP) is like a fortress and it is claimed
that TCP is the defence against virus and worm attacks. This sort of
sentence recalls the Montaigne's text [
          <xref ref-type="bibr" rid="ref10">10</xref>
          ] on the siege of Pavie. The mistake
of the enemy of Anne de Montmorency was to thought that their fortress
was inviolable. The reason of this mistake was military and moral. Indeed,
¯rst a fortress is never unassailable unless we demonstrate it, and second
it is sin of pride to believe that we are unassailable.
3
        </p>
      </sec>
    </sec>
    <sec id="sec-3">
      <title>Viral attacks, for which objectives ?</title>
      <p>We distinguish three main types of aim from which computer attacks are
justi¯ed. They indicate the hacker wish, which is now identi¯ed to the
Prince.
3.1</p>
      <sec id="sec-3-1">
        <title>Libertarian attacks</title>
        <p>This kind of attack is the one who promotes the hacker as a heroic or
romantic person. There are several movies, which illustrate this. (See for
example, the soteriological character of Neo in Matrix.) It is also worth to
mention the etymology of the word "hacker", which means someone "who
cut or sever with repeated irregular blow". The hacker claims the
possibility by creating a virus to leave the system and to ¯ght against it. In
some sense, this supports a link between the political and the computer
world, making a modern metaphor of totalitarian system. To illustrate
this point, it is su±cient to think to the struggle against the giant
Microsoft.
\the will to power"
The second aim falls into the class of hackers for which their actions is
a way to a±rm their power. The hacker Sven Jaschan is a teenager who
said " after his arrest "It was just great how Netsky began to spread, and
I was the hero of my class". We end by citing again Montaigne " il y a
plus d'allgresse assaillir qu' dfendre " (I 47). (A translation "There is
more exhilaration to assail than to defend".)
3.3</p>
      </sec>
      <sec id="sec-3-2">
        <title>Attacks in the name of political values</title>
        <p>We distinguish between two kinds of activity. The ¯rst kind is a military
issue. It seems that any war, or should, begin with a viral attack in order
to cut communication links between the di®erent army forces. Moreover,
espionage is now a matter of computer virology. The second kind, less
dramatic, is related to economic market. Indeed, spywares are a weapon
to steal data from some concurrent ¯rms. In both cases, the notion of
war with a just cause (Jus ad bellum) is present and legitimates such
behaviours.
4</p>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>A new political economy ?</title>
      <p>Information is a major issue for the di®erent kind of power (at the
political, economic and epistemological level). It corresponds to a scale
modi¯cation in the relationship between men, and also to a scale modi¯cation
in the temporality of the war itself. We should wonder whether this is
a change in the nature pf politic relations, or if it is just a re-scaling of
them.
4.1</p>
      <sec id="sec-4-1">
        <title>A war modern with a di®erent scale</title>
        <p>Computer war is a war of a new kind by the numerical scale change. First,
the hacker is alone most of the time unlike traditional con°icts, which
involve army forces. (From an historical point of view, the numerical
superiority was one of the key factors of victory.) Second, a single hacker
has the ability to strike billions of computer users with a virus. The
balance of power relation is quite paradoxal: the aggressor is alone against
a potentially in¯nite number of users.</p>
        <p>Moreover, there are three other characteristics of a viral war, which
it is worth listing. (1) The hacker stays anonymous and the victims of a
worm stay also anonymous. (2) A computer virus is still a "clean war".
(But the near future could contradict this, think of a car virus !). The
last point (3) is that the defence is not a real time player of this war
at present. Unlike a general who moves his forces during a battle with
respect to the move of his opponent, the anti-virus softwares, which are
the current defences, are passive. The reason is that most of them are
searching for known virus signatures. So, a new virus is invisible for this
kind of defence.
4.2</p>
      </sec>
      <sec id="sec-4-2">
        <title>Temporality changes</title>
        <p>Treatises about political and war art, like the one of Machiavelli, insist in
the relation between time and power. A conquest is a success if it lasts.
In Le Prince, Machiavelli states the main di±culty is never the military
conquest. The most di±cult part is to keep a conquest. From this, we
could think of a classi¯cation of malwares based on their life duration
inside a computer system. Moreover, the war temporality is changed: a
viral attack may last a few seconds or minutes. Again, from an historical
perspective, the concept of war is based on a long term. Because of this
new temporal dimension, computer wars are new. Lastly, the defence is
currently a post-reaction against viruses and does not anticipate attacks.
We see that a viral war is a war of a new kind with respect to the above
discussion.
5</p>
      </sec>
    </sec>
    <sec id="sec-5">
      <title>Knowledge and Power?</title>
      <p>
        We suggest considering schemas of analyse that Michel Foucault proposed
to de¯ne an approach of viral computer war like a modern expression of
the political relations. The relationship between hackers and
users/government is based on knowledge and power. Today, we are at the beginning
of this struggle and the issue is an epistemological one because computer
attack is one of the structural parts of computer science. Indeed, Cohen
[
        <xref ref-type="bibr" rid="ref3">3</xref>
        ] and Adleman [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ] works, which coined the word "virus", showed that
pioneer works of Turing [
        <xref ref-type="bibr" rid="ref11 ref12">11, 12</xref>
        ] and Kleene [
        <xref ref-type="bibr" rid="ref6">6</xref>
        ] implies the construction
of viruses as a consequence of the recursion theorem. Finally, M. A.
Ludwig says "I am convinced that computer viruses are not evil and that
programmers have a right to create them, possess them and experiment
with themtruth seekers and wise men have been persecuted by powerful
idiots in every age". The mean of computer viruses is inextricably
political, since they play a key role in struggles and power relations. Moreover,
computer viruses imply issues that concern economical, geopolitical and
strategic questions.
      </p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          1.
          <string-name>
            <given-names>L.M.</given-names>
            <surname>Adleman</surname>
          </string-name>
          .
          <article-title>An abstract theory of computer viruses</article-title>
          .
          <source>In Advances in Cryptology | CRYPTO'88</source>
          , volume
          <volume>403</volume>
          . Lecture Notes in Computer Science,
          <year>1988</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          2.
          <string-name>
            <given-names>A.</given-names>
            <surname>Arendt</surname>
          </string-name>
          .
          <article-title>The origins of totalitarism</article-title>
          . Harcourt, Brace and world,
          <year>1968</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          3.
          <string-name>
            <given-names>F.</given-names>
            <surname>Cohen</surname>
          </string-name>
          . Computer Viruses.
          <source>PhD thesis</source>
          , University of Southern California,
          <year>January 1986</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          4.
          <string-name>
            <given-names>E.</given-names>
            <surname>Filiol</surname>
          </string-name>
          .
          <source>Computer Viruses: from Theory to Applications</source>
          . Springer-Verlag,
          <year>2005</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          5.
          <string-name>
            <given-names>M.</given-names>
            <surname>Foucault</surname>
          </string-name>
          .
          <article-title>Les mots et les choses</article-title>
          .
          <source>Gallimard</source>
          ,
          <year>1966</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          6.
          <string-name>
            <given-names>S.C.</given-names>
            <surname>Kleene</surname>
          </string-name>
          . Introduction to Metamathematics. Van Nostrand,
          <year>1952</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          7.
          <string-name>
            <given-names>N.</given-names>
            <surname>Machiavel</surname>
          </string-name>
          . L'art de la guerre.
          <source>Garnier-Flammarion</source>
          ,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          8.
          <string-name>
            <given-names>N. Machiavel. Le</given-names>
            <surname>Prince</surname>
          </string-name>
          . Garnier-Flammarion,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          9.
          <string-name>
            <given-names>N.</given-names>
            <surname>Machiavel</surname>
          </string-name>
          . Discours sur la troisiµeme d¶ecade de Tite-Live. Gallimard,
          <year>2003</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          10.
          <string-name>
            <given-names>M.</given-names>
            <surname>Montaigne</surname>
          </string-name>
          . Les Essais,
          <article-title>Livre 1</article-title>
          .
          <string-name>
            <surname>Gallimard - La Pliade</surname>
          </string-name>
          ,
          <year>1962</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          11.
          <string-name>
            <surname>A.M. Turing</surname>
          </string-name>
          .
          <article-title>On computable numbers with an application to the entscheidungsproblem</article-title>
          .
          <source>Proc. London Mathematical Society</source>
          ,
          <volume>42</volume>
          (
          <issue>2</issue>
          ):
          <volume>230</volume>
          {
          <fpage>265</fpage>
          ,
          <year>1936</year>
          . Translation [
          <volume>12</volume>
          ].
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          12.
          <string-name>
            <surname>A.M. Turing</surname>
            and
            <given-names>J.-Y.</given-names>
          </string-name>
          <string-name>
            <surname>Girard</surname>
          </string-name>
          . La machine de Turing. Seuil,
          <year>1995</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          13. C. von Clausewitz. De la guerre.
          <source>Perin</source>
          ,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>