Overview

Three laws of Cyber security
Software development is an exact science which can be described accurately.
Despite this ICT security has been for months if not years going round in circles. There are new security programs that react to things which have happened in the past. The situation has worsened and has spread to equipment which could be the target of attacks. These attacks are no longer focused on Pcs but further targets are smart phones, SCADA/PLC systems, IoT.
Software development is an exact science. In the area of development and
testing of software, it is necessary to describe the procedures and functions clearly. It is necessary to describe the output of SW modules or the whole application. By using clear descriptions it is possible to test in an easy manner. Today computer viruses are based on that their authors know the route how to connect the virus to existing files. This route has been known since the times of MS-DOS.
The second route is that virus authors find a one off way how run an infected computer because they may know a zero day weakness in the program or they abuse the trust of the user. Weakpoints in computer programs have been, are and will be. We should also take into account the inexperience and possibly the naivity of the average user.
Where is the problem?
When we want to defend ourselves against computer viruses we have to protect others files (operating systems, drivers and other applications) so that any virus cannot modify them. When we prevent the system from running unknown and unsafe files therefore we remove the location where computer viruses and fraudsters can cause damage.
This is a very simple solution. This solution will be beneficial for everybody.