software
Can I get in trouble for making a malware?
<p>I'm making a malware software in my final thesis at the university. I won't use it ever, and it was made by educational and scientific purposes only. But my university will publish it, giving the opportunity for everyone to use it. If someone commit a crime with my software, can I get in trouble?</p>

<blockquote>
  <p>my university will publish it, giving the opportunity for everyone to
  use it. If someone commit a crime with my software, can I get in
  trouble?</p>
</blockquote>

<p>I would say "No" for three reasons. I will assume that you are in a jurisdiction of the U.S. or reasonably similar thereto.</p>

<p>First, the malware code is part of your thesis, which in turn is a prerequisite (already <a href="https://law.stackexchange.com/questions/34160/can-i-get-in-trouble-for-making-a-malware/34197#comment62964_34160">approved by the university</a>) for graduation. If anything, the entity that would be knowingly broadcasting the material is the university, not you. Any liability in the vein of <a href="http://www.legislature.mi.gov/(S(2ubfmtd5hibnrarwrhdecvcs))/mileg.aspx?page=getobject&amp;objectname=mcl-750-540f" rel="nofollow noreferrer">MCL 750.540f</a> would fall on the university, as it knows better than you about the presumed "risks" as to whether third-parties might abuse your research.</p>

<p>In the context of a <em>public</em> university with its typical status of "arm of the state", it would be untenable if one arm of the state (the university) authorizes you to proceed, and subsequently another governmental agency prosecutes <em>you</em> once your thesis reaches completion.</p>

<p>Second, your thesis with all the source code therein expresses ideas which are protected by the First Amendment. A serious discussion of malware necessarily requires that these ideas be expressed in assembly code (often intertwined with excerpts in machine code) of the architecture for which it is devised. Anything short of that makes a discussion of malware meaningless because this topic depends so heavily on the particulars of the targeted family of processors.</p>

<p>Furthermore, the academic context evidences your pursuit of educational &amp; scientific advancement rather than a direct or indirect intent to encourage criminal activity. A person whose ultimate purpose is to promote computer crimes has many alternatives which are quicker and more effective than enrolling in a university, pay tuition, and undergo years of academic study.</p>

<p>Third, (without minimizing your merits) it is doubtful that no solution could ever exist for the malware you devise, or that no one else from a "clandestine" setting would ever come up independently with an akin variant of that malware. Thus, publications of malware made with the openness and formalities of a university thesis are likelier to be viewed as a heads up to IT security companies about enhancements they might need to make on products &amp; services they offer.</p>
