[Info-vax] Anti-virus ?

[Bob Gezelter]

On Thursday, August 10, 2023 at 3:47:18 AM UTC-4, Niels S. Eliasen wrote:
> Hello 
> Believe it or not... 
> but was asked by a customer yesterday: "What anti-virus software exist on OpenVMS ?" 
> Anyone that has knowledge of such a product for OpenVMS ? 
> 
> 
> -- 
> kind regards/mvh 
> 
> Niels S. Eliasen 
> 
> Eliasen Consult 
> Oregaardsvaengevej 1 
> DK-4720 Præstø 
> Tel/Cell: +45 21779590 
> mailto:ni... at eliasen.co
Niels,

First item, to the best of my knowledge there has never been an OpenVMS virus, as the term is used in the Windows/Mac/linux world.

If you check the industry databases of known vulnerabilities, e.g., CVE , it is rare for OpenVMS to be mentioned. There have been vulnerabilities referencing OpenVMS, generally involving OpenSource software ported to OpenVMS, e.g., the year 2028 issue for Unix style 32-bit dates.

Common pathways used by malware to infect systems are also not as prevalent on OpenVMS as on platforms where web browsers are commonly used.

Holes in underlying processor firmware and virtualizations are a hazard, but I not recall any Windows anti-virus product addressing that class of exploits. All mitigations involving processor timings are typically remediated by "not doing that". I admit that I do not believe that "not doing that" is not a good solution in any context. 

Simon's question concerning "data at rest" is a valid concern, but can be addressed by using appropriately configured storage devices.

If you want to speak privately, please feel free to email me directly.

- Bob Gezelter, http://www.rlgsc.com