Unsolved
This post is more than 5 years old
3 Apprentice
•
15.6K Posts
0
8261
July 31st, 2014 04:00
Anti-virus programs themselves are insecure
"According to Joxean Koret, a researcher at Singapore security firm COSEINC, antivirus programs are as vulnerable to attacks as the applications they’re trying to protect and expose a large attack surface that can make computers even more vulnerable".
Full article http://www.pcworld.com/article/2459760/antivirus-products-riddled-with-security-flaws-researcher-says.html
Be sure to read through the "presentation slides" as linked in that article... very comprehensive.
[EDIT: Be advised the presentation crudely uses some expletives :emotion-6: ]
0 events found
No Events found!
ky331
3 Apprentice
•
15.6K Posts
0
July 31st, 2014 07:00
The author "indulges in vulgarities, which is not professional and cheapens his presentation".
Agreed. When I first posted the information here, I hadn't had a chance to really go through it all... the topic was certainly provocative, and I thought it would lead to a good discussion. When I just now had more time to sift though all the slides, I noticed the expletives, and immediately modified my post above (just a minute or two before you posted here).
I make no pretense to understanding the article's/slide's contents. Perhaps some companies (IT departments) will actively refute the article's contentions. All I wanted to bring across here is that, IF true, it's a condemnation of the many anti-virus products that overlook their own weaknesses.
joe53
2 Intern
•
5.8K Posts
0
July 31st, 2014 07:00
Well I read the slide show, and as I know nothing about coding, haven't a clue about most of what he says. Fuzzing? Emulators?
I do note several grammatical errors (maybe English is not his first language). And he indulges in vulgarities, which is not professional and cheapens his presentation.
His recommendations for AV users:
"Do not blindly trust your AV product." This I agree with. Which is why layered security is the path to take.
"Isolate the machines with AV engines used for gateways" What exactly are AV engines used for gateways? And how do I isolate my PC? Staying off-line is always safer, I suppose.
"Audit your AV engine". Sorry, but that is beyond most home users, including me.
In short, his talk seems to be aimed at IT pros for companies, not at home users. It's a lot of FUD, and I would not abandon my various AVs anytime soon. They have served me well for 15 years.
joe53
2 Intern
•
5.8K Posts
0
July 31st, 2014 08:00
It's an interesting concept that using an AV might increase your exposure to malware.
For all I know, it might well be true. A significant number of members at Wilders's report that they use no AV. But I will stick with what has worked for me, over many years.