Antivirus Safety Net Has Too Many Holes

April 17, 2001, 10:20 AM —  Computerworld — 

The largest risk my company faces for downtime and lost revenue comes from virus infections. Viruses used to be a nagging little problem that affected only those who trafficked in copyright- infringing software on floppies. Then Microsoft decided that documents should also be virtual machines that run macros, and the virus world became a lot more exciting. Just when we got our heads around that, Microsoft decided that e-mail clients should also be able to run scripts and that our address books should be open to all software.

There are thousands of viruses, each of them trying to spread, and many of them leaving damaged data and public relations woes in their wake.

We run the best antivirus defenses money can buy. We update our software every time the vendors release new patches. We spend a great deal of effort on the problem, and yet we still suffer occasional virus infections. Why?

Chinks in the Armor

First of all, we must continue to do business. Our development teams need to share code. Our sales teams have to send documents and presentations, our finance teams have to share spreadsheets and databases. These days, all these files can contain viruses.

This Week's Glossary

Virus generation tool kit: Software available on the Internet that allows low-skilled wannabe virus writers to create viruses. One of these tool kits, called Visual Basic Script Worm Generator, was used to create the recent Anna Kournikova virus.

Secure Sockets Layer: SSL consists of a set of cryptographic protocols that use public-key technology to authenticate the site you are visiting and encrypt the data stream to keep the data transmitted confidential and unmodified.

Morris worm: A program written by Robert Morris Jr., a student at Cornell University in Ithaca, N.Y., that spread across the Internet in November 1988 and crippled large parts of it.

Melissa virus: This launches itself when a user opens an infected Microsoft Word 8 or Word 9 document. It prompts Microsoft Corp.'s Outlook e-mail program to send an infected document to the first 50 addresses in a victim's address book.

Love Bug: A Visual Basic script worm sent as an e-mail attachment. The message's subject contains "I Love You." It propagates itself to all addresses in a victim's address book.

LINKS:

www.hushmail.com: Dublin-based Hush Communications is a Web-mail company that takes security seriously -- perhaps even a little too seriously. It's for paranoid people like me.

www.vmyths.com/index.cfm: Can't tell your AOL4Free.com from your Love Bug? VMyths.com, Rob Rosenberger's virus myths home page, will help you separate fact from fiction.

I remember recruiting new staff to address virus issues and interviewing a string of ex-military and intelligence types. Short haircut after short haircut explained to me that the way to eradicate the virus threat was simply to remove all floppy drives and CD-ROMs from all machines, disable Internet access

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff

Enterprise 2.0 Implementation
By Aaron C. Newman, Jeremy Thomas
Published by McGraw-Hill
Learn more!

Deploying Cisco Wide Area Application Services
By Zach Seils, Joel Christner
Published by Cisco Press
Learn more!

Featured Sponsor

AISO founders envisioned a Web hosting company that was environmentally friendly. While the company employed energy-efficient innovations like solar panels, its infrastructure produced unacceptable power and cooling requirements. Find out how AISO leveraged AMD technology to overcome their challenge in this case study white paper.

In this whitepaper, Scalar explores the opportunity to change the landscape with respect to mission critical databases built around Oracle. Leveraging technologies such as Linux, high-end commodity processing power and Oracle RAC technology to architect, design, build and maintain database infrastructure that delivers maximum availability, reliability and performance at a fraction of traditional cost.

On a typical day, weather.com, the Web site for The Weather Channel in Atlanta, serves up between 15 million and 20 million page views. But in September 2004, when back-to-back hurricanes ransacked Florida, the peak traffic on one day more than tripled: over 70 million page views by more than 7 million unique visitors. Read the full success story now.

More Resources