Computer & Network Security: Two Anti Virus Strategies

By: Thomas McClintock
Submitted: 2007-01-17 13:43:56
Print this article | Tell a friend | For publisher | Social Bookmarking
Rating:
 

Rootkits and advanced spyware have fundamentally changed the playing field says Mike Danseglio, Program Manager in the Security Solutions group at Microsoft, according to Fox News’ “Microsoft Official: Malware Recovery Not Always Possible” by Ryan Naraine, reporting from InfoSec World on April 5th, 2006. “When you are dealing with rootkits and some advanced spyware programs, the only solution is to rebuild from scratch. In some cases, there really is no way to recover without nuking the systems from orbit," states Mr. Danseglio.

He cites a recent instance where an unnamed branch of the U.S. government struggled to design an automated process to wipe and rebuild 2,000 infected client machines. "In that case, it was so severe that trying to recover was meaningless.” While training costs can be high, they pale in comparison to the mounting expenses incurred by detecting damage, recovering lost work and rebuilding compromised systems--let alone “nuking” and starting all over again from scratch.

Rootkits, for example, use kernel hooks which often make them undetectable. Because of this, they are able to hide malware programs, making them the weapon of choice to compromise computer systems. Mr. Danseglio adds that IT administrators may never even know if the entire rootkit has been successfully removed. The cleanup process is "just way too hard."

"We've seen the self-healing malware that actually detects that you're trying to get rid of it. You remove it, and the next time you look in that directory, it's sitting there. It can simply reinstall itself," he said. "Detection is difficult, and remediation is often impossible," Danseglio declared. "If it doesn't crash your system or cause your system to freeze, how do you know it's there? The answer is you just don't know," he explained. "Lots of times, you never see the infection occur in real time, and you don't see the malware lingering or running in the background.

Fortunately, however, the alternative, training, is easier than it ever was, thanks to new online technologies such distance learning. The important point to remember is that, with today’s viruses. all employees--not just IT people--must be trained.

Tom McClintock is a Senior Analyst with NSI Partners (http://www.nsipartners.com), the consulting firm that operates the IT distance learning web site eLearnConnect which can be found at http://www.elearnconnect.com

Article source: Expert Articles

Most Recent Articles in Security category

  • Essential Tips For Secure Online Trading - By: Liam Derbyshire
    Conducting business on the internet is fraught with numerous perils. From identity theft to elaborate scamming schemes, criminals are out there in cyberspace trying their best to rob you out of your hard earned cash. A few simple tips give you all the protection you need from the vile schemes of these con artists.
  • Discover the joys of anonymous proxy servers. - By: Kulveer Singh
    As Google Adwords and Google Adsense becomes more mainstream, the rate of fraud from self-clicking (commonly called Google-bation), and click-draining (clicking on competitors ads), will increase exponentially. The problem is that the electronic antichrist has an obvious conflict of interest in eliminating fraud. Like most web site owners running Google Adsense, you probably are tempted to just "test" ads to make sure all the html you have embedded on your site is working. In some markets these little "tests" can reward the web site owner over $20 per click. Drugs, bank loans and obesity cures pay pretty well I'm told.
  • Stepping Up Your Security - By: Scott Jarvis
    Many online businesses have been using this method of security for over ten years and still have not upgraded to a better form of online security. Though many smaller businesses have yet to adopt a more advanced technology, several high profile companies have begun using some form of two factor authentication both on their websites and in their offices.
  • You Can't Do Without Search Engine Optimization - By: Naman Jain
    No websites can ignore the importance of search engine optimization to their website. It is the most essential tool, which will helps them grow their Online business.
  • Identity Theft - Don't blame The Internet - By: Kavita B
    Identity theft - also known as ID theft, identity fraud and ID fraud - describes a type of fraud where a criminal adopts someone else's identity in order to profit illegally. It is one of the fastest growing forms of fraud in many developed countries.
  • AllAnonymity - anonymous browsing solutions - By: Ionel Orza
    In our days identity protection has become increasingly important, because any time someone could be watching what you do on your computer through online spying. Someone like your boss, someone trying to hack your system, or even the government may be on your track while you peacefully surf the web.
  • 8 Simple Ways to Defend Against Evil Doers Both Online and Off - By: Dan Preston
    There once was a time when the only option people had when shopping was to either call in or snail mail in a catalog order form or to jump in the family car, fight through traffic, and wait in long checkout lines to complete the purchase.Well, nowadays there’s still a few major mail order catalogs floating around and we all still visit our local retail outlets, but time has also introduced the internet as one of our options to shop from the comforts of home.The internet has made shopping at home a breeze and along with it has unfortunately brought the so called ”Evil Doers” who I believe have such little happiness in their own lives that they must leech pleasure from the hardworking and innocent individuals of our wonderful and surrounding nations.
  • Dirty Little Computer Viruses and How To Protect Yourself - By: Dan Preston
    Whether you have learned your lesson from a past experience with a nasty computer virus or have been pressing your luck by surfing the web and downloading various files or opening those email messages sent to you by people you don’t know without any real understanding of just how vulnerable you really are each time you log onto your computer you now have the opportunity to discover what steps you can take to avoid such an annoying and many times destructive infestation.Listed below are some of the guidelines you can follow in order to keep those nasty viruses from making a mess out of your computer and your life.•Purchase and install a well respected antivirus software program and be sure to set it up so that it automatically runs when the computer starts up each time.
  • Protect Your Little Black Book - By: Rick Cooper
    The movie Little Black Book features a young woman, Stacy, who is frustrated when her boyfriend refuses to share information about his past relationships. When his PDA, a Palm Tungsten C, falls into her hands, she is faced with a conundrum. Does she give it back, or does she explore it?
  • Can I Guess Your Password? - By: David Congreave
    We all know that it’s dangerous to use the same password for more than one program. If you sign up for a program run by someone of low moral fibre, what is to stop them running through various programs with your username and password to see what they can access? But of course remembering all the different passwords can be a headache.