Feeds

Leaky anti-virus defences letting malware through

Spanky new scanners no longer cutting it

Combat fraud and increase customer satisfaction

Even users running up-to-date anti-virus software still get infected with malware, according to stats from an online malware scanning service.

Nearly a third (25,000 out of 78,800) of computers with up-to-date anti-virus software were discovered to be infected with malicious code when users scanned their PC using SurfRight's HitmanPro 3 behavioural scan.

SurfRight's analysis (pdf) is based on 107,435 users who put their PC through its scanner between 10 October and 4 December 2009. Around a quarter of these users (28,608) either had no scanner installed or were running security software that was out of date.

Surfers are much more likely to turn to SurfRight's software if they suspected their Windows PC was running slowly or might be infected with malware, so the figures from SurfRight's audit are bound to come out worse than those from the general web population.

Still, the exercise does illustrate the problem that running the latest version of antivirus software is no guarantee against malware infection, contrary to what the marketing department of many security software firms have historically said.

SurfRight's technology bundles seven different antivirus programmes and offers them through its HitmanPro 3 scanning service. Other vendors, such as Panda, have previously acknowledged up-to-date anti-virus software alone is only a partial defense against malware, but have taken a different approach to tackling the problem. Panda has adopted a cloud-based architecture for security software as a technique for becoming more nimble in responding to the growing volume of malware threats. ®

SANS - Survey on application security programs

Whitepapers

Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.