|
Author: Tim Klemmer Article source: http://morganarticlearchive.com/. Used with author's permission.
This is the second in a series of articles highlighting reasons why we need a new model for anti-virus and security solutions.
Reason #2: the Desktop Security Software Risks
The risks of placing software on the desktop are such that I will be breaking this article into two parts.
Fundamentally we think of having software on our desktops as a good thing. I love downloading or installing new packages and seeing what new creative things people do to the user interface or what they do to make certain aspects of my life easier or more fun.
But there are problems inherent with software that resides on the desktop, especially security software. All developers will know what I mean. First and foremost, desktop software can be reverse engineered. What's that mean? Have you ever inadvertently double-clicked on a file and had garbage show up or seen something that looks similar to this?
http://www.checkinmyemail.com/Articles/image001.jpg
The old hex dump. Programmers will know it well. We actually spend a good deal of time trying to read this stuff. Basically, if there are programs that can (and do) turn instructions like the following
If UserBirthDate < "01/01/1960" then
IsReallyOld = "Yes
Else
IsReallyOld = "No"
End If
into something like the picture above, then the reverse is true: people have developed software that can take that gobbeldy-gook in the picture above and turn it somewhat into the if-statement I wrote out. The reversing software won't know that I had an item called UserBirthDate, but it will know I was testing for a value of January 1, 1960 and it will be able to say that based on that value I set another item to Yes or No.
So now we install our fool-proof anti-virus software on our desktop (or our firewall for that matter). Well, so too can a virus author. And that virus author or hacker will also have gotten a copy of the latest reverse-engineering software from his local hacking site. He now goes upon his task of reverse-engineering the software and then trying to decipher the results. It's not easy but it can be done. Unfortunately, vendors know this and understand this as an acceptable risk.
The problem here is that your security software is at risk. If your vendor codes an error, the virus author can and will detect it. For example, if your vendor should exclude a file from scanning, it's possible the virus author will figure out which file (or type of file) that is and bury his code there. If the vendor excludes files from scanning or heuristics, it's possible that virus author will figure out a way to corrupt that file.
That being said, there are other risks. As we have said, once software is on the desktop it affords virus authors an opportunity to reverse-engineer security software. The knowledge that reverse-engineering provides is invaluable to a virus author when building his next software attack. Third, virus authors can learn where the anti-virus vendors put there software and put the links to their software (directory folders, registry entries, etc.). This too is invaluable information. In fact, in some ways it teaches people intent on writing malicious software clues as to how to infiltrate the computers' operating system, where registry entries need to be made to force software to be loaded every time a computer is started, etc.
This information is generally available all over the web and in manuals for operating systems, especially manuals on such subjects as the Windows Registry. But having the software teach you where things belong to be effective is powerful knowledge.
Lastly, and perhaps most significantly, is the issue of forebearance. The anti-virus vendors usually know more about the potential exploits inherent in programs than virus authors but they are bound by the fact that should they try to prevent them before the exploits occur, they could be branded as irresponsible for teaching virus authors about these very exploits.
For example, when Microsoft first released the macro capabilities of Word, anti-virus vendors immediately realized the potential for danger in macros, but they were handcuffed. If they released software that disabled macros before the first macro virus was ever released, they would signal to virus authors the inherent destructive powers of macros. They chose instead to wait, handcuffed by the limitations of desktop software.
Until the Internet there really has been no better medium for delivering virus solutions than desktop software. It was relatively inexpensive to deploy (either market the software and sell it in stores or provide free downloads on bulletin boards and web sites). It is, however, expensive to keep updated in terms of time and effort, even with automated update systems.
The Internet caused several things to happen: by becoming a powerful medium for sharing files, whole families of viruses disappeared practically overnight (boot sector viruses, for example); by becoming the option of choice for sharing files, it was easier to infect a single file and have thousands download it.
A better solution is to place the security software in an offsite appliance of its own making. All Internet, intranet, networking connections flow through the appliance.
Selling off the shelf hardware appliances with built-in security software is better than a desktop software solution but it still suffers -to a lesser extent- from the pratfalls that desktop software falls prey to.
Even better is to create a service that a 3rd party vendor manages in a secure environment. In such an instance both the software and the hardware are away from the prying eyes of the malicious software authors. This further reduces the opportunity for malicious authors to discover the tricks and techniques employed by the security vendors to protect you. About The Author
Tim Klemmer
CEO, OnceRed LLC
http://www.checkinmyemail.com
Tim Klemmer has spent the better part of 12 years designing and perfecting the first true patented behavior-based solution to malicious software.
timklemmer@checkinmyemail.com
Beating Your Neck, Back and Shoulder Pain
Suffering from neck, back and shoulder pain? If you are, you're in good company. Millions of people wake up every morning and endure every day experiencing pain...
Three Keys to Greatness
Ten years ago I went into the studio and recorded a 56-minute video for teenagers called "Three Keys To Greatness." Although my focus was for teenagers, the pri...
Drink Beer AND Lose Weight
Want to shed that beer belly? Why not try the low-carbohydrate approach? Following the philosophy of today's most popular low-carbohydrate books, dieters gradua...
11 Moments of Truth
These moments come when a customer or client… 1. Hears someone else praise you or your work. 2. Likes your physical presentation (appearance, voice, and smil...
Achieving Success Through Effective Goal Setting
Strategies for setting goals effectively.
The True Key to Prosperity
To have a high probability of becoming prosperous, you have to start with one very important decision!
The Top 10 Marketing Tools to Grow Your Business in 2004
Looking to grow your business? Make sure you have these marketing tools in place: #10 A powerful tagline In 10 words or less, a good tagline reinforces a compa...
Learning Styles and the Home Schooler - - Part I of III
It's important to determine your child's personal learning style so you can adjust your curriculum to suit your child particular learning style.
Great Interview Skills
Going for a job interview can be a harrowing experience. The reasons are varied: A job applicant may not have the necessary relevant working experience or may b...
What Forgiveness Is Not
Is a grudge-laden heart sabotaging your success in business
and in life?
Seven Reasons Why You Might Take Hoodia
This article touches on the epidemic that may yet claim more lives than some cancers. Obesity.It discusses briefly the possiblity of a naturally occuring medici...
How to Maximize Goals, Affirmations and Visualizations
By paying attention to your thoughts and feelings while practicing techniques such as goal setting, affirmations and visualizations, you can achieve exciting re...
The 3 Steps To Communication Mastery
You limit yourself. Yes, it is true. Each day you behave in much the same way as you have always done. You act out your habitual ways of dealing with people, an...
Belonging to Jesus Christ
You are looking only on the surface of things. If anyone is confident that he belongs to Christ, he should consider again we belong to Christ just as much as he...
Is Your Dog Fat?
Obesity is one of the greatest health concerns facing dogs. You can and should do something about it. Overweight dogs may live shorter and less healthy lives an...
Site-Digest 7 Simple Steps To Place Your Site Map On Steroids
The Site Map is a too often overlooked piece of the Search
engine Optimization Puzzle. Here is a Simple Step 7 step
approach to create a Super Charged Site D...
Book Yourself Solid: The Simple Selling Process
Remember that the selling process is more about your clients and less about you.
Muscle Pain And Children Do Not Mix
I am in pain. I've been in pain all day. Last night, I was in "searing pain", which is pain multiplied by pain, divided by relief, then multiplied by pain to ...
Understanding Your Stress Levels
In order to understand stress better, it is a good idea to understand that there are different stress levels. These levels vary in the form of stress they take...
What is the Atkins Diet and How Can It Help You?
With the Atkin Diet, you can stop counting calories, stop weighing food portions, and stop feeling as though you are deprived from eating good-tasting and satis...
eCommerce Software Solutions
When you've achieved a certain amount of success with your E-Business website, then it's time to get some good software to automate all your tasks.
Fall Foliage Scenic Drive – Rhode Island Coast
This Rhode Island scenic drive is delightful any season of the year, but with fall foliage the added splash of color deepens the experience and appreciation of ...
Marriage - Miscommunication: Root Cause of Problems?
Article about Marriage, Couples.
How To Be Your Doctors Favorite Patient
Simple, common sense insider advice on how to interact with the doctor and staff to gain perferred status as a great patient.
|
Print this page