main

Traditional anti-virus tools now obsolete

Daniel Fleshbourne   on 07 October 2008 - 18:18 · 29 comments & 6580 views

Advertisement (Why?)
Traditional anti-virus tools have become an outdated way of responding to today's threats, according to security giant McAfee. McAfee built its security empire on signature-based anti-virus products. However, Chris Kenworthy, senior vice president for enterprise at the firm, told delegates at the ISSE security conference in Madrid that the evolving nature of current threats should force firms to look at alternative ways to secure their systems.

He advised security professionals to invest in multiple integrated technologies to cope with different types of malware, including zero-day exploits, rootkits and Trojans. But more important than the technology is an enterprise security policy, according to Kenworthy. "We vendors want to sell you lots of products, but really it's the policy that will drive good security practice in an organisation. If you don't have the policies the technology will be ill-deployed," he said

View: The full story @ vnunet

Post a comment · Send to friend Comments · There are 29 additional comments
#1 +TCLN Ryster on 07 Oct 2008 - 18:21
"Traditional anti-virus tools now obsolete".... says an Anti-Virus vendor happy to sell you a non-obsolete version
#2 +GreyWolfSC on 07 Oct 2008 - 18:30
"Come on and buy some crap from us!"
(3 replies) #3 majortom1981 on 07 Oct 2008 - 18:34
mcafee should not talk. We are uptodate with our mcafee installation and it only detects things after other software already detected it.
#3.1 Liquidfox on 07 Oct 2008 - 21:06
Why do you even have it in the first place?
#3.2 excalpius on 08 Oct 2008 - 01:46
Indeed. Only Norton products are worse. Any IT department recommending either of these should be SACKED.
#3.3 cork1958 on 08 Oct 2008 - 11:14
(excalpius said @ #3.2)
Indeed. Only Norton products are worse. Any IT department recommending either of these should be SACKED.


Don't know if I'd say "only" Norton is worse," but as far as the 3 worst pieces of software ever written in history, McAfee, Norton, and AOHELL are THEE top 3!!
#4 Landlocked on 07 Oct 2008 - 18:47
Spin: "It's OK that your system crawls with our product; it's for your benefit."
(3 replies) #5 stifler6478 on 07 Oct 2008 - 18:52
Wow guys - McAfee is practically saying the opposite of "buy our stuff". The guy is pointing out that if enterprises don't deploy security systems properly, there's no use in AV, which is probably true. They're pretty much saying "don't buy our stuff unless you know what you're doing".

I don't really support McAfee - I don't use their stuff, but the guy isn't saying anything greedy or stupid.

-Spenser
#5.1 Dakkaroth on 07 Oct 2008 - 19:16
That's how I read it too. The comments above actually made me reread it in fact, thinking that,"Hey, maybe they all read it correctly and I somehow misread." But no, just people simply reading the title and posting...
#5.2 Mayhem on 07 Oct 2008 - 19:17
you are right, is exactly what their saying that their AV and any others are not any use of new virus detect system and even worse on protecting a 0-day

i hope they and the others innovate the system, its to easy to build some random virus code and spread it without any AV detecting it, by what we can see in virus list on the AV their always N versions of the same virus simply because anyone with 1 version can simply use any freeware encrypting programs or compacting to be totally new signature

its time to innovate, one company (sorry don't remember what their name) developed an "AV" that relies not on signatures of virus but on signatures (md5 system i believe) of the programs themselfs

i know that is not the best solution to have a online database of Safe files signatures being one reason that the program we are running aren't their yet or simply if some user don't have Internet connection

lets see if their improve altogether, even if almost no one admit it, Vista UAC stops many spreads and helped some bit on this war against virus
#5.3 +GreyWolfSC on 07 Oct 2008 - 22:22
(stifler6478 said @ #5)
Wow guys - McAfee is practically saying the opposite of "buy our stuff". The guy is pointing out that if enterprises don't deploy security systems properly, there's no use in AV, which is probably true. They're pretty much saying "don't buy our stuff unless you know what you're doing".

I don't really support McAfee - I don't use their stuff, but the guy isn't saying anything greedy or stupid.

-Spenser


The reason I sang the "buy our crap" song is because I'll bet they're getting ready to release something that will supposedly solve all the 'woes' in this article.
#6 Chugworth on 07 Oct 2008 - 19:16
lol - McAfee - I'd rank their product lower than Norton/Symantec. That's pretty bad.
(3 replies) #7 sin-ergy on 07 Oct 2008 - 19:21
I hate anti-virus software. Most of'em are bloated pieces of ****. I don't have one installed on my PC but I'm running AVG free on the laptop (which is used by the wife

The best software for protection? Your brain. Use it.

#7.1 Amodin on 07 Oct 2008 - 20:09
(sin-ergy said @ #7)
I hate anti-virus software. Most of'em are bloated pieces of ****. I don't have one installed on my PC but I'm running AVG free on the laptop (which is used by the wife

The best software for protection? Your brain. Use it.


"Egotism is the anesthetic that dulls the pain of stupidity."
#7.2 Liquidfox on 07 Oct 2008 - 21:08
No AV is one of the stupidist things you could do...

We have spam filtering, a pathetic AV, and we're all IT technicians in our office. It's our business... we still managed to get infected with the Bravia virus... still to this day we didn't know how it got in...
#7.3 stifler6478 on 07 Oct 2008 - 21:21
(Liquidfox said @ #7.2)
No AV is one of the stupidist things you could do...

We have spam filtering, a pathetic AV, and we're all IT technicians in our office. It's our business... we still managed to get infected with the Bravia virus... still to this day we didn't know how it got in...


While I can see this point of view, I also only have AV on my desktop, but not on my laptop. I generally only use my laptop for school related work so I don't view it as a big thing to have. I've been without AV on it for almost a year now and if I have some sort of virus/malware/etc, it's not affecting my laptop's performance, and so far as I know, nobody's stolen any identifying info off of it (if I have any stored, not sure on that one). If I ever do get a virus, I don't have anything sensitive enough that I'd regret losing by reverting to the manufacture state of the laptop.

So what's stupid about this scenario. I'm actually saving battery life by not having AV constantly running in the background. Yes, I know you can disable that function, but I don't much see the point of having AV if you aren't going to let it catch something as it hits, rather than after you've figured out it's messing up your system.

-Spenser
(1 reply) #8 KavazovAngel on 07 Oct 2008 - 22:05
"You want bloat? Here, install our software."

...

"Thanks for installing our obsolete anti-virus software. For customer support prey to god."

(j/k)

EDIT: About the topic: He has a point, but did he forgot that he makes obsolete software?
#8.1 Dakkaroth on 08 Oct 2008 - 01:20
I'm sure he hasn't forgotten. However, when you're in the security business, and, I would imagine, getting complaints from businesses saying,"Hey, we still get viruses even with your bulls---!" it makes sense to take a moment to explain that there's more to it than simply having an antivirus.

It's like expecting the built in firewall on XP to stop all intruders. Granted, you pay for an antivirus and it should do SOMETHING, it just can't be the only defense you have.
#9 bob_c_b on 07 Oct 2008 - 22:53
We use McAffee at my place, buggy, bloated junk.
(1 reply) #10 Airlink on 08 Oct 2008 - 05:32
Does anyone actually use McAfee anymore?
#10.1 ]SK[ on 08 Oct 2008 - 14:54
We resell Sophos. However a German ran company we do work for insisted we use install McAfee for them. Currently we have had to install just the client on the workstations with no central server as their management products don't support Windows 2008. That said neither does Sophos. I still wouldn't use McAfee though.
#11 carlskov on 08 Oct 2008 - 11:24
Stick with Firefox, AvG Free and Spybot S&D, and you're all good... And without the bloat.
#12 naap51stang on 08 Oct 2008 - 12:57
anyone that still uses a AV solution that detects only signatures is dumb anyway.
(3 replies) #13 GEIST on 08 Oct 2008 - 14:19
I surf the 'net ~10 hours a day and catch something malicious maybe once or twice a year, if anything at all. I don't know what some (or a lot of) users do to have their systems infected. Windows Firewall is good enough for me.
#13.1 +warwagon on 08 Oct 2008 - 16:22
agreed.

#13.2 Airlink on 08 Oct 2008 - 18:15
If you don't have any antivirus, how would you know if you became infected?
#13.3 Relativity_17 on 09 Oct 2008 - 04:44
(Airlink said @ #13.2)
If you don't have any antivirus, how would you know if you became infected?


How do you know that you aren't infected, AV or not?
(1 reply) #14 freeza on 09 Oct 2008 - 16:44
.......lol i haven't been using an AV in years. If you surf smart and don't download random things, why would you ever get infected?
#14.1 +xan K on 11 Oct 2008 - 15:13
(freeza said @ #1)
.......lol i haven't been using an AV in years. If you surf smart and don't download random things, why would you ever get infected?
simply by plugging in an infected friend's usb-based drive (even an iPod or camera). you don't know how many infected flash drives my friends have connected to my computer and the AV has done a pretty good job. it would be wise electric-taping our usb ports either, in order to keep an "Antivirusless" computer safe.

note, I have removable drive autoplay disabled and still virus warnings manage to pop up.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)