Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If there a generally agreed upon naming convention for types of malware/virus? For example, are there agreed upon terms for virus, trojan, worm and the like?

If one exists could someone explain it or link to an explaination?

share|improve this question
up vote 4 down vote accepted

As far as I'm aware there is no universal naming convention, only vendor-specific conventions.

For instance:

Each vendor has their own particular convention, but a lot of them to overlap.

share|improve this answer
Yes, that is a facebook link :(. But it really is to Sophos' glossary. – user185 Feb 1 '11 at 11:35

Roughly, according to me:

  • a virus got onto your system because it was 'carried' by something else;
  • a worm got onto your system because it found a vulnerability in a network service on your system;
  • a trojan got onto your system because you were duped into thinking it was a legitimate program and installed it

So this axis of classification is about how the malware is spread.

Once on your system, it doens't make much difference what sort of malware they are, although they are then more usefully classified by what they do: spyware, adware, etc.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.