David Harley

David Harley

Senior Research Fellow


Education? Academic background in modern languages, social sciences, and computer science.

Highlights of your career? I was a late starter (1986) as an IT professional, beginning at the Royal Free Hospital, then with the Human Genome Project (1989), then at Imperial Cancer Research Fund (1991-2001), where I wrote/co-wrote/edited a number of Internet FAQs and my first articles on programming and security. I presented my first conference papers in 1997 (at Virus Bulletin and SANS). In 2001 Osborne published Viruses Revealed (co-written with Robert Slade and Urs Gattiker): VR and the later AVIEN Malware Defense Guide (Syngress) – to which Andrew Lee also contributed – are probably the best known of my books. When I rejoined the UK’s National Health Service in 2001, I ran the Threat Assessment Centre and was the go-to person nationally for malware issues. I left to work as a freelance author and consultant in 2006, which is also when I began to work with ESET.

Position and history at ESET? Senior Research Fellow at ESET N. America. Primarily, I’m an author and blogger, editor, conference speaker, and commentator on a wide range of security issues. Like the rest of the industry, they put up with me because I’ve been around so long.

What malware do you hate the most? Malware is just code. It’s malicious people I detest. While I’ve no love of scammers, I can see that it’s easier to be honest in a relatively prosperous environment – if there is such a thing anymore – and that cybercrime can be driven by an economic imperative. But I have nothing but contempt for those sociopaths who cause harm to others for no reason except that they can.

Favorite activities? The guitar (I still gig and record when time allows), other people’s music. I love opera but don’t attempt to sing it. Photography, art, poetry, country walking – well, ambling is about as much as I can manage at my age – good food and wine, good television when I can find it...

What is your golden rule for cyberspace? Scepticism is a survival trait: don’t assume that anything you read online is gospel truth, even this adage.

When did you get your first computer and what kind was it? Amstrad PCW (primarily a word-processor) in 1986. What else would you expect a not-very-rich author to buy in 1986? :)

Favorite computer game/activity? Extra-curricular writing (blogging, verse and lyrics, articles). Digital photography and miscellaneous artwork.


893 articles by David Harley

ESET research

VB100 test results (53 today!)

VB100 test results (53 today!)

ESET research

VB100 test results (53 today!)

David Harley01 Dec 20082 min. read


ESET research

Global Threat Report

Global Threat Report

ESET research

Global Threat Report

David Harley01 Dec 20083 min. read


ESET research

Spies in One's Samovar (or a Storm in a Teapot)

Spies in One's Samovar (or a Storm in a Teapot)

ESET research

Spies in One's Samovar (or a Storm in a Teapot)

David Harley30 Nov 20082 min. read


ESET research

AV-Comparatives Retrospective Test (and a Word about False Positives)

AV-Comparatives Retrospective Test (and a Word about False Positives)

ESET research

AV-Comparatives Retrospective Test (and a Word about False Positives)

Retrospective or "frozen" testing involves testing the ability of one or more products to detect threats proactively, using techniques such as advanced heuristics rather than signature detection.

David Harley29 Nov 20083 min. read


ESET research

Mytob and the National Health Service: a Matter of Trust

Mytob and the National Health Service: a Matter of Trust

ESET research

Mytob and the National Health Service: a Matter of Trust

David Harley27 Nov 20082 min. read


ESET research

Anti-Malware Testing Resources

Anti-Malware Testing Resources

ESET research

Anti-Malware Testing Resources

...after many years of campaigning for better testing and better information about testing, it feels very positive that people are prepared to sit through a 60 minute presentation and then go on asking questions for another half hour...

David Harley27 Nov 20081 min. read


ESET research

Mytob and the NHS: Trigeminal Nostalgia

Mytob and the NHS: Trigeminal Nostalgia

ESET research

Mytob and the NHS: Trigeminal Nostalgia

David Harley18 Nov 20081 min. read


ESET research

AMTSO, Testing and the Media

AMTSO, Testing and the Media

ESET research

AMTSO, Testing and the Media

David Harley16 Nov 20081 min. read


ESET research

Hybrid Detection: I have seen the future...

Hybrid Detection: I have seen the future...

ESET research

Hybrid Detection: I have seen the future...

whitelisting itself is hybrid...And it works best as one layer of a defensive strategy, at any rate in the version of the internet in which we currently find ourselves.

David Harley12 Nov 20082 min. read