Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88%...
Transcript of Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88%...
![Page 1: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/1.jpg)
Computer Viruses in Urban Indian
Telecenters: Characterizing an
Unsolved Problem
Prasanta Bhattacharya and Bill Thies
Microsoft Research India
NSDR 2011
![Page 2: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/2.jpg)
Computer Viruses
in the Developing World
• Cited as a major problem
– In Ghana [Best 2010]
– In India [Haseloff 2005]
– In Kenya [Wyche 2010]
• Many possible explanations
– Economics: can’t afford registered antivirus
– Connectivity: can’t download latest signatures
– Education: lack of awareness and training
• To date, mostly anecdotal evidence
– In Nigeria [Adomi 2007]
– In Uganda [Mwesige 2004]
– In Uzbekistan [Kolko 2009]
![Page 3: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/3.jpg)
This Paper: A Systematic
Characterization of the Virus Problem
• Via a survey of 25 telecenters in Bangalore, India
• Basic finding:
Viruses remain an important unsolved problem
• In this talk:
– Impact of viruses
– Coping strategies
– Possible solutions
80% of locations have moderate to high prevalence of viruses.
Yet 88% of locations are running antivirus software!
![Page 4: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/4.jpg)
Context: Urban Indian Telecenters
• In India:
– 180,000 cyber cafes
– 40,000 other telecenters
– 37% of 22 million urban
Internet users rely on
public access terminals
• Common applications:
– Resume preparation / job search
– Arranging travel (train, bus, air)
– Entertainment (games, Facebook, etc.)
• Customers typically pay Rs. 10 ($0.22) per hour
![Page 5: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/5.jpg)
Software Ecosystem of Telecenters
• Focus: small shops with
shared-access machines
– Internet cafes (18)
– Mobile/photo studios (5)
– Photocopy centers (2)
• Vast majority use Windows XP, and non-genuine
– “Who in today’s world uses a genuine copy of Windows
sir?”
• Tech support via external helpers ($5-$10 per visit)
0
5
10
15
1 2-5 6-10 11-20
# o
f S
ho
ps
Number of Computers
![Page 6: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/6.jpg)
Large Investment in Antivirus Software
• 88% of centers are running antivirus software
• Of antivirus users, 72% pay for licensed versions
– Paying users spend about $10 per machine per year
– Non-paying users have cracked or trial versions
Kaspersky (9) Quickheal (6)
Avast (4) Avira (3)
McAffee (3) None (3)
AVG (2) Norton (2)
RegCure (1) XoftSpy (1)
![Page 7: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/7.jpg)
Prevalence and Impact of Viruses
0
2
4
6
8
10
12
14
None Low Moderate High
Nu
mb
er
of
Sh
op
s
Prevalence and Impact of Viruses
Prevalance of viruses
Impact on business
Annual expenditure on antivirus (USD / computer / year):
4.0 4.8 13.1 3.3 1.9 5.5 9.5 9.5
![Page 8: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/8.jpg)
An entire marriage ceremony tape got ruined at
one time. All the audio and video files suddenly
changed type into an unknown format and
wouldn’t open in any existing player. The customer
ended up losing all the precious data from the
ceremony, and was really furious about it. ”
“
— Manager of a photo studio
![Page 9: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/9.jpg)
The problem with my antivirus is that when I scan
my computer, if it finds an infected file, instead of
removing the virus, it ends up removing the whole
file. Twice, important customer data has got lost
due to this scanning process. Hence, I ignore all
such alert messages. ”
“
— Manager of a photocopy center
![Page 10: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/10.jpg)
Re-Installing the Operating System
0
1
2
3
4
5
6
7
1month
2-3months
4-6months
7-10months
12months
irregular
Nu
mb
er
of
Sh
op
s
Average Lifetime of OS Installation (Time Between Successive Wipe & Re-installs)
![Page 11: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/11.jpg)
Rollback and Recovery Software
• We found four installations of Deep Freeze
– But, inactive or not helping to control virus problem
– Hypothesis: difficult for users to toggle admin mode
Oh, Deep Freeze does not get rid of your virus
problems. I kept having these viruses, due to unsafe
browsing, due to which I finally got myself an antivirus. ”
“
![Page 12: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/12.jpg)
Rollback and Recovery Software
• Shortcomings of rollback software in dev regions:
– Does not match mental model of virus control
– Loses customer data on power outage
– Security vulnerability:
SafeSys worm compromised 45,000 machines in Asia
Big opportunity to improve on rollback software!
![Page 13: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/13.jpg)
Current Direction:
An Improved Rollback Engine
• In addition:
– Bundled with a Windows installer: no configuration
– Uses Microsoft Virtual Hard Disks for efficiency, security
• Avoids SafeSys vulnerability
• Less overhead than a virtualization solution
Want to commit
changes?
“Save and Reboot” button
password-protected
Yes
Shutdown due to
power outage?
No
Preserve temporary
state on next boot Rollback to
prior state
Yes No
![Page 14: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/14.jpg)
Opportunities and Constraints
• Must not inconvenience the customer
I cannot enforce any such strategy [of scanning USB
drives] or policy as that might end up troubling the
customers. If a customer brings an infected disk/drive,
I really don’t have an option.
“
”
![Page 15: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/15.jpg)
Opportunities and Constraints
• Must not inconvenience the customer
• Curb unsafe browsing practices
Earlier, there were a lot of customers who used to
frequent my shop in the evenings to visit pornographic
sites. Those days, at least one system used to go
down every single day, and I had to format the
machine in the mornings. Then I turned the systems to
face me, and they stopped coming.
“
”
![Page 16: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/16.jpg)
Opportunities and Constraints
• Must not inconvenience the customer
• Curb unsafe browsing practices
• Leverage willingness to pay
84% of shop owners willing to pay more for antivirus!
I’m sure all studios like us wouldn’t mind in spending
an additional 500-1000 rupees [$11 - $22] on a much
better antivirus software. Even though all major
antivirus providers make tall claims, none of them are
actually significantly useful in tackling the issue.
“
”
![Page 17: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/17.jpg)
Why Does Virus Problem Persist?
• We don’t know for sure. Some possibilities:
– Viruses are common due to unprotected machines,
making it difficult to protect any one machine
– Older machines, lower connectivity, non-expert users
– Need for malware protection in addition to antivirus?
– Viruses in India not caught by Western antivirus?
• Many of these questions could be answered by
doing an “epidemiology” of computer viruses
![Page 18: Computer Viruses in Urban Indian Telecenters ... · Large Investment in Antivirus Software •88% of centers are running antivirus software •Of antivirus users, 72% pay for licensed](https://reader034.fdocuments.in/reader034/viewer/2022042305/5ed0a997e680e81782517b0f/html5/thumbnails/18.jpg)
Conclusions
• Computer viruses remain
an important unsolved
problem for shared-usage
machines in India
– Despite widespread adoption
of antivirus software
– Despite willingness to pay
for a better solution
• Interesting research opportunities in:
– Designing a usable and secure rollback mechanism
– Understanding the ecosystem of viruses themselves
Internet café owner in Bangalore