Lesson 1.

Feb 10, 2005 07:09 GMT  ·  By

Having a class for writing viruses wasn't enough for the Calgary University which started such a class in May 2003. Apparently virus writing is a science and we weren't even aware. Now that things have evolved from "plain old viruses", a class for spyware writing was in order.

And again, Calgary does it for you, offering students a course in writing spyware and the tools for sending and propagating spam.

The reaction to the latest addition to the syllabus has been more measured, with many in the security sector saying the right skills, taught in a controlled environment will prove a useful addition to their industry.

In regard of this class, security leaders are less drastic than they were about virus writing classes. Steve Purdham, CEO of SurfControl, said he'd certainly look favourably upon any applicant who was a graduate of the spyware writing course. Purdham says it does the students and the university a great disservice to assume they will abuse the knowledge rather than put it to good use.

A few years ago, when the virus writing was included into the curricula, Dr Jan Hruska, CEO of Sophos issued a stark warning to students considering taking the course if they have a career in IT security in mind.

He said Sophos will not hire any students from the course and urged other anti-virus firms to follow suit. Others followed suit saying that running an educational course on anti-virus and anti-hacking could be a positive thing, but don't teach people how to damage other people's systems.