insertions in operational systems. Typical of such guidance are NIST Special
Publication (SP) 800-83, Guide to Malware Incident Prevention and Handling, and
other anti-malware guidance published by NIST; the NISCC’s Mitigating the Risk
of Malicious Software; the online newsletter Virus Bulletin; [60] and Skoudis and