Malicious Code - What Should We Do?

The information systems today are being inundated with new software packages that have potential for unexpected behavior via malicious code. The consumer and user of the products whether it is freeware or purchased software, Commercial Off the Shelf (COTS), should be provided with some type of certification that the software products being used does not infect the computer system or network. This paper will provide information and avenues for the developer of software products as well as the user of the software products to gain confidence that a software package is not likely to contain malicious code and have a minimal risk of potential vulnerabilities in a software package.