Feeds

Qualys crawls into the malware scanning biz

Friendly robots provide drive-by download alerts

Next gen security for virtualised datacentres

Qualys is inviting sys admins to sign up to a new free service, QualysGuard Malware Detection, which provides alerts about drive-by-download attacks and malicious scripts on monitored websites.

The service is based on behaviour analysis and offers automated alerts when it finds websites with rogue JavaScript, character encoding inside inline frames or malware. These alerts will identify the location of a suspicious file but typically won't name the threat. Qualys' service, launched in beta on Monday, may incorporate naming in future. This would most easily be delivered via a partnership with an anti-virus firm.

QualysGuard Malware Detection crawls monitored websites daily through a bank of virtual machines running unpatched copies of IE6 and Windows to see if anything iffy occurs. McAfee SiteMonitor and services bundled with Google and Yahoo provide surfers with site scans that are sometimes incorrect.

Chief technology officer at Qualys Wolfgang Kandek said its service would provide evidence for sys admins in challenging false positives. He described results from other malware scanning services as "uneven". Tainted ads are often a source of malware. Kandek said Qualys' service would detect if sites were serving rogue third party ads but it may not help much in pinning down which ad is at fault, a practical difficulty in several real cases we've come across in recent weeks.

Sys admins are invited to sign up for QualysGuard Malware Detection here.

Qualys is best known for its widely-used on-demand vulnerability scanning service. The malware detection service is a expansion into a adjacent area of net security and an opportunity to up-sell its new QualysGo Secure. This is a paid-for service that allows companies to check whether they are being proactive in fighting malware and other security threats on their sites and that their SSL cert is in order. Qualys Go Secure subscriptions cost a pricey $995 per web site per year. Successfully passing the Qualys audit allows firms to display a "Secure Seal".

The service is broadly similar to VeriSign's Trust Seal, which costs a more modest $299 a year, but includes SSL cert verification and a scan for web application vulns such as SQL injection bugs advent from the VeriSign service. ®

The essential guide to IT transformation

More from The Register

next story
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
Researchers camouflage haxxor traps with fake application traffic
Honeypots sweetened to resemble actual workloads, complete with 'secure' logins
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
prev story

Whitepapers

Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up distributed data
Eliminating the redundant use of bandwidth and storage capacity and application consolidation in the modern data center.
The essential guide to IT transformation
ServiceNow discusses three IT transformations that can help CIOs automate IT services to transform IT and the enterprise
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.