The information security profession has long mined biology for metaphors to describe cyber threats. For example, we call certain forms of malware “viruses” or “worms”. If the malware successfully installs, we call the event an “infection” and follow up with a “forensic” investigation. If a malware “strain” changes, we call it a “mutation”. Some have attempted to develop these casual metaphors into more rigorous frameworks. Academic papers such as “Biological Approach to
