Defining spyware and adware

The Microsoft security team has published an exhaustive white paper on the definitions of spyware and adware:

Unlike other forms of software, which tend to either be “good” or “bad,” spyware often exists in shades of “gray.” With the exception of malicious behaviors, many of the behaviors could have legitimate purposes. The potential for harm and disruption to the user’s PC experience depends on the specific behaviors demonstrated by a given program.

As a result, software classifications in the definition library for Windows AntiSpyware (Beta) not only capture the type of program (e.g., “adware,” “software bundler,” “browser modifier,” etc.) but also the degree of risk posed to the user. This is then communicated to the user, along with a recommended action. In Windows AntiSpyware (Beta), the user always has the ability to choose for themselves whether they want to “Always Ignore,” “Ignore,” “Quarantine,” or “Remove” a given program.

This is very, very thorough. I’ll read it more closely for sure.

(Thanks to Larry Seltzer and Alex Eckelberry for the pointer.)