Virus Hypes, Hoaxes and Memetics
Applying memo theory, we can see that Michelangelo hype discussed previously in this
paper carried with it the meme of "danger". This is a seemingly common motif in virus hoaxes and hypes: many of the hoaxes discussing in detail in antivirus online (http://www.av.ibm.com) contain the meme (but not necessarily the word) "danger" and dire warnings to those who do not follow the given instructions. Our example hoax, the Good Times virus, also made good use of the meme "danger". Thus, we can see that the meme "danger" seems to be important to the transmission of virus hoaxes and hypes. All this seems somewhat obvious (after all, who would worry about a virus if it didn't purport to be dangerous?) but we can draw more from the meme model.
In memetic theory, there is a meme-complex, which is basically "the gist" of the idea. The meme-complex of the virus hypes and hoaxes we observed contain, in addition to the meme of danger, the element of "bait". The bait in this case is the reward of maintaining the integrity of the data, and of doing the "right" or "helpful" thing by telling everyone else about the "danger". Finally, memetic theory uses the concept of a "vaccime". The vaccime is defined [22] as "any meta-meme which confers resistance or immunity to one or more memes, allowing that person to be exposed without acquiring an active infection. Also called an 'immuno-meme'. Common immune-conferring memes are 'Faith', 'Loyalty', 'Skepticism', and 'tolerance'."
Thus, if computer virus hypes and hoaxes are memetic, we should be able to limit their propagation and effect upon our organizations by disseminating in advance the correct vaccime. In the case of viral hypes and hoaxes, many of the important elements of such vaccimes are, quite simply, ideas which can be put into policies, and are outlined specifically using virus hoax case histories, in Appendix A. Here, we will limit ourselves to more general comments.
In the case of computer virus hoaxes and hypes, the very idea of testing ideas for theoretical consistency is one of the strongest "anti-hoax" techniques you can use. Unfortunately, while such a meme may be very effective at conferring resistance, it has also historically not been as successful in terms of replication as the memes which it attempts to counter. Of course, every person with access to e-mail in your organization may not have the technical ability to determine whether or not a warning about a virus is accurate. Determining the theoretical consistency of the content of virus warnings may be simply beyond their ability, or outside the scope of their job duties. However, this responsibility can be assigned to the person within your organization who is responsible for keeping up to date on real virus and security threats. This designated individual may make use of valid warnings, which can come from vendors or which may be issued by response teams such as CERT (http://www.cert.org), and pass them on via pre-approved channels. It is important to keep in mind that these warnings should be digitally signed and authenticated, as there have been instances of forged warnings. Additionally, warnings that do not contain the name of the person sending the original notice, or warnings which appear from addresses that do not exist should be questioned.
We discussed earlier the ways in which some virus e-mail hoaxes call upon the loyalty of the recipient to his friends. "Pass this message along, and save them a lot of trouble" is a common theme. By instilling the knowledge in your employees that passing along unauthorized virus information may actually harm your organization, and have a negative impact on productivity, you provide your employees with the opportunity to be loyal to his friends, co-workers and organization in a positive way. The virus hypes and hoaxes often cite recognized authorities, and as we have shown, people like to pass along messages which cite these credible sources. By making it company policy to only allow circulation of mail from a predetermined recognized authority, you provide your employees with the opportunity to cite with confidence the type of information which they value, and which will help your organization. A centralized source of information is invaluable in keeping rumors and inaccurate information to a minimum.
Return to Top
Conclusion
In this paper we have examined several examples of hoax and hype, first generally, and then virus specific. We have looked at some of the reasons why hoaxes spread, including self-interest, lack of skepticism and trust in authority. Additionally, we have suggested the application of memetic theory to the area of virus hypes and hoaxes in order to gain some measure of how widespread a particular hoax is likely to become.
By gaining a better understanding of the mechanisms which underlie the successful hoax and hype, we have established a set of heuristics which allow us to judge how well a particular message fits the criteria for being a hoax.
The most powerful form of defense against hoaxes is to build up a set of trusted sources of information which have a good track record for accuracy. This approach alone, along with a good measure of skepticism, will protect the reader from the vast majority of all virus misinformation circulated.
Whether virus hypes and hoaxes are passed on as a result of memes, or human characteristics, or a combination of both, or neither, we have observed that just as viruses must have certain characteristics to survive in the wild, so must messages which are in reality virus hoaxes or hypes. Whether we refer to these characteristics as survival mechanisms, or think of them as "aids to natural selection", the end result is the same – hoaxes and hypes continue to cause disruption, costing your organization time and money. Thinking about how and why hoaxes and hypes continue to spread is the most effective way you can stop them from spreading. In Appendix A, we present a practical guide to using simple user-friendly heuristics to spot virus hoaxes and hypes. Additionally, information on current virus hypes and hoaxes may be found at:
http://www.av.ibm.com
http://ciac.llnl.gov/ciac/CIACHoaxes.html
Finally, we would like you to consider the following quote from Sagan's wonderful book "The Demon Haunted World":
The tenets of skepticism do not require an advanced degree to master, as most successful used car buyers demonstrate. The whole idea of a democratic application of skepticism is that everyone should have the essential tools to effectively and constructively evaluate claims to knowledge. All science asks is to employ the same levels of skepticism we use in buying a used car or in judging the quality of analgesics or beer from their television commercials.
Return to Top
Appendix A. How to Spot a Virus Hoax
Bibliography