microsoft
Report a problem

Microsoft Preps Business Antivirus, Antispyware Product

Slimy   on 25 April 2007 - 15:03 · 18 comments & 5799 views

Advertisement (Why?)
Speaking at a technology event near Amsterdam, Microsoft CEO Steve Ballmer said that Forefront Client Security, Microsoft's antivirus and antispyware product for business desktops that has been in development since 2003, will be available "in the next month." The product has been in beta testing for more than a year, and the company's most recent target for final release is by the end of June. Ballmer characterized the product as an all-in-one security product for PCs in a business environment. Forefront Client Security is based on software Microsoft acquired in its 2003 purchase of antivirus vendor GeCAD. It also includes antispyware technology that Microsoft brought on board in 2004 when it bought Giant Company Software.

In his speech, Ballmer acknowledged that it's only been in the last five years that Microsoft has made security a priority as it developed new and existing products: "About five years ago, we got a real wake-up call: security issues really started to accelerate on the Internet and in our products. We had built products and designed them in a world [before] the Internet. [When] we started to see any increase in the number of security issues, the first thing we did was committed ourselves to the reliability of our core products."

News source: PC World

Post a comment · Send to friend Comments · There are 18 additional comments
#1 Express on 25 Apr 2007 - 15:11
I wonder if Microsoft uses their own anti-virus product on their company servers?
A practice Microsoft calls dogfood
(11 replies) #2 rich.bradshaw on 25 Apr 2007 - 15:19
Instead of concentrating on cleaning and protecting systems, why not try and fix the underlying issue....

Computers should not need antivirus or antispyware software. Security advisories are fine, but not the hundreds that plague Windows computers.

Perhaps Vienna will deliver on this, and provide computers that are actually ready for use in todays world...
#2.1 Express on 25 Apr 2007 - 15:34
The underlining problem is people click on everything and install all sort of crap.
I only occationaly run online-scanners virus scanner -- don't have a active scanner. The machine is set to autoupdate since XP. Proud to say not a single infection in over 10 years since I first started using computers.
#2.2 rich.bradshaw on 25 Apr 2007 - 15:45
Yeah, to be fair I haven't had a virus on Windows since my friend gave me a copy of qbasic on a 5.25" disk...

But people obviously do. The issue is that you should be able to use a computer with out fear that if you click the wrong thing then it's all going to go up in smoke.

You shouldn't need antivirus in a company - firewalls are obviously important here, but anti-virus...

Why did Windows become the most used OS....
#2.3 Yakkob on 25 Apr 2007 - 16:01
Quote - (rich.bradshaw said @ #2.2)
You shouldn't need antivirus in a company - firewalls are obviously important here, but anti-virus...


Which planet are you from?

#2.4 simsie on 25 Apr 2007 - 16:10
Quote - (rich.bradshaw said @ #3)
The issue is that you should be able to use a computer with out fear that if you click the wrong thing then it's all going to go up in smoke.


Surely the antivirus is meant to deliver that sense of security.
#2.5 rich.bradshaw on 25 Apr 2007 - 16:20
I mean that these products shouldn't need to exist...

It's like buying a car, then having to buy as an extra something to keep the wheels on. If you don't then they will probably fall off unless you are a mechanic who knows where and where not to drive.

When you buy a car, you expect problems like keeping the wheels on to be fixed - the extra security shouldn't be needed.

Buying a computer, that out of the box, can't be connected to the internet without heavy and constant patching sounds like a computer that isn't finished.

You wouldn't accept this with any other product...

Now, this wouldn't really be as much of a problem if there weren't other operating systems which didn't have these problems. Otherwise we could say, as Microsoft undoubtedly believe, that computers are too new to have all the bugs ironed out - other industries have had orders of magnitude longer to sort things out. Unfortunately, other systems have got it sorted out.

Window's isn't ready for the primetime yet - there are huge problems with it's foundations that Vista has started to address. As I said, hopefully the next version will bring the security issue up to the same level we expect and need if we are to move towards a more and more computer based lifestyle.
#2.6 CCRATA on 25 Apr 2007 - 16:35
Quote - (rich.bradshaw said @ #2.5)
I mean that these products shouldn't need to exist...

It's like buying a car, then having to buy as an extra something to keep the wheels on. If you don't then they will probably fall off unless you are a mechanic who knows where and where not to drive.

When you buy a car, you expect problems like keeping the wheels on to be fixed - the extra security shouldn't be needed.

Buying a computer, that out of the box, can't be connected to the internet without heavy and constant patching sounds like a computer that isn't finished.

You wouldn't accept this with any other product...

Now, this wouldn't really be as much of a problem if there weren't other operating systems which didn't have these problems. Otherwise we could say, as Microsoft undoubtedly believe, that computers are too new to have all the bugs ironed out - other industries have had orders of magnitude longer to sort things out. Unfortunately, other systems have got it sorted out.

Window's isn't ready for the primetime yet - there are huge problems with it's foundations that Vista has started to address. As I said, hopefully the next version will bring the security issue up to the same level we expect and need if we are to move towards a more and more computer based lifestyle.

troll.
There will always be a need for it because the OS has to allow customization, otherwise people will get upset that they can't install their applications and whatnot. Its user error that creates the need for antivirus not the os. How is the os suposed to know that the user is computer illiterate and doesn't realise this free screensaver is actually trying to steal his passwords.

Edit: and if you believe linux is secure from user error than I have a wonderful download for you. Just go get it and then do insmod klm_stealyourinfoandgivemerootaccess.o

Last edited by CCRATA on 25 Apr 2007 - 17:04
#2.7 PCyr on 25 Apr 2007 - 17:21
The only way to prevent virus and malware is to prevent the user from having any real access to the system. That means no installing programs, no changing settings, no running programs except whats been added to a list, which you can't add because you can't change settings.

In the future, before saying what should and shouldn't be, please check as to whether that's technically feasible.
#2.8 raskren on 25 Apr 2007 - 19:51
Quote - (rich.bradshaw said @ #2.5)
I mean that these products shouldn't need to exist...

It's like buying a car, then having to buy as an extra something to keep the wheels on. If you don't then they will probably fall off unless you are a mechanic who knows where and where not to drive.

blah, blah blah

There's a fatal flaw in your argument. When you're driving your car down the road, you don't have people trying to trick you into doing unsafe things with your car.

A/V software protects computers from people. The user is the weakest link in the security chain, not the OS.
#2.9 ichi on 25 Apr 2007 - 20:05
Quote - (CCRATA said @ #2.6)
There will always be a need for it because the OS has to allow customization, otherwise people will get upset that they can't install their applications and whatnot. Its user error that creates the need for antivirus not the os. How is the os suposed to know that the user is computer illiterate and doesn't realise this free screensaver is actually trying to steal his passwords.

Edit: and if you believe linux is secure from user error than I have a wonderful download for you. Just go get it and then do insmod klm_stealyourinfoandgivemerootaccess.o



Sure you should be able to customize the OS, install apps and whatnot. The thing is, needing an antivirus to stay safe while doing all that stuff just shows the OS design is flawed. If a program is supposed to install a screensaver, it should be allowed to do that exactly, and nothing more.

Regarding that kernel module, you should better provide the source code, instructions to download/install the kernel sources and compile the module, and then expect the kernel to be configured to accept module loading.

Anyway, compare the number of times times you modprobe a module vs the times you double click an exe.
#2.10 JonathanMarston on 25 Apr 2007 - 20:35
Quote - ichi said
Sure you should be able to customize the OS, install apps and whatnot. The thing is, needing an antivirus to stay safe while doing all that stuff just shows the OS design is flawed. If a program is supposed to install a screensaver, it should be allowed to do that exactly, and nothing more.


Hence the Vista security model and UAC...

Quote - ichi said
Regarding that kernel module, you should better provide the source code, instructions to download/install the kernel sources and compile the module, and then expect the kernel to be configured to accept module loading.


This is why Windows is the most used OS. You can actually install stuff (like services and kernel-mode drivers) by simply running setup.exe. Sure it's own advantage is its own down-fall, but isn't it that way with all OSes? Linux is strong and stable, but hard to configure, which makes it strong and stable. With MacOS you know it will work, but only because it only works on what Apple lets it work on. Windows does anything and everything the user wants, but the user has to make sure that anything and everything is really what they want it to do.

Last edited by JonathanMarston on 25 Apr 2007 - 20:46
#2.11 ichi on 25 Apr 2007 - 21:16
Quote - (JonathanMarston said @ #2.10)
Hence the Vista security model and UAC...


That still relies on an "all or nothing" approach. You either deny access, or allow the program to do whatever it wants to do, which you wont know until it's already done.

That is, it's putting again the burden on the user, how has to decide if he trusts an app he knows exactly what it's supposed to do, but can't tell if it'll be actually doing that. It should be up to the OS to provide a more fine grained access control. Even if an app is running with admin privileges, there's no reason why it should be allowed to do anything besides what it's supposed to do.

Don't give me a "but on linux..." because I know not all linux setups have something like that. What I said about the UAC could apply to relying just on sudo aswell.
I'm just talking about the way I think things should be, on any OS.
#3 eilegz on 25 Apr 2007 - 15:39
well onecare wasnt that good so if its like that then i pass
#4 Jugalator on 25 Apr 2007 - 17:49
I doubt it's going to beat the Enterprise edition of NOD32, that's not even very expensive, but we'll see...
(1 reply) #5 MazX_Napalm on 25 Apr 2007 - 17:53
MS bought Sybari Antigen last year(?). It is a pretty good AV for Exchange.
#5.1 wilbert on 25 Apr 2007 - 21:54
Quote - (MazX_Napalm said @ #5)
MS bought Sybari Antigen last year(?). It is a pretty good AV for Exchange.


Yes they did purchase Antigen and it is a great AV for Exchange. We have used the product for a few years now and the multiple scanning engine solution is great.
#6 wilbert on 25 Apr 2007 - 21:58
Funny how things turn into a rant on how Windows should not need an AV solution. With that said we have been a part of the Forefront beta program for a while and I can honestly say it is a good product. After we installed the software, which can be installed using WSUS, we found several systems with malware and one machine with a virus. All of the systems had Trend installed and it did not find any problems.

This is a good product for being v1. Integration is good and the reporting is very good.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)