Malware is a Disease; Let's Treat it that Way

Botnets and botnet kits are flourishing. They're now a commodity, as are the use of controlled machines. Just about daily, a new and frightening major system crack is revealed, data released, embarrassed IT security people called on the carpet. Were these a human virus, the CDC would be subjecting it to observation, protocols, all while someone was racing to invent (perhaps too many) vaccinations for the world to use. It would be an effort that had procedure, and a plan. The U.S. lacks a cohesive national plan to control malware, and the costs of exposure might be calculable to motivate organization of an authority to deal with the problem.

The "free market" of protection surrounds the operating system vendors, third-party virus malware eradication and protection vendors like Kaspersky, Symantec, McAfee (and many others), and a fleet of integrators and consultants. While these organizations provide control to prevent and mitigate, they aren't financially compelled to stop the problem before it starts. There is no motivation for an ounce of prevention that prevents the hideous pounds and costs of cure.