{"id":2884,"date":"2014-11-17T09:34:43","date_gmt":"2014-11-17T15:34:43","guid":{"rendered":"http:\/\/www.poweradmin.com\/blog\/?p=2884"},"modified":"2015-04-24T14:28:33","modified_gmt":"2015-04-24T19:28:33","slug":"are-malware-threats-making-antivirus-software-obsolete","status":"publish","type":"post","link":"https:\/\/www.poweradmin.com\/blog\/are-malware-threats-making-antivirus-software-obsolete\/","title":{"rendered":"Is Antivirus Software Becoming Obsolete?"},"content":{"rendered":"

\"virus-trojan-spyware\"<\/span>Viruses, trojans, worms \u2013 malware<\/a> (a contraction of \u2018malicious software\u2019) come in many forms. Even though these threats have been around for decades, the volume has increased steadily in line with overall internet usage. What\u2019s more, just as the sophistication and capabilities of technology has improved over the years, so too has the proficiency of malicious programs. Indeed, if you aren\u2019t keeping your technology up-to-date, then you\u2019re leaving yourself compromised to the ever-increasing effectiveness of malware.<\/span><\/p>\n

According to the IT security organization AV-Test<\/a>, over 220,000 malicious software programs are detected every day. If you want to keep a close eye on daily detections, then head over to Virus Total<\/a>, where a constantly updated graph shows the amount of threats found over the last 7 days.<\/span><\/p>\n

\"anti-virus\"<\/span>And this isn\u2019t even the whole picture. Not even the antivirus software installed on your computer can detect every threat that comes its way; depending on the software, the figure can even be as low as 60%<\/a>. And even if a threat is detected it is usually too late:<\/span><\/p>\n

\u201cMost anti-virus tools use signature files to detect viruses. But it is an \u2018after the fact\u2019 method: Only when new viruses are detected are they added to the malware lists.\u201d \u2013 Tech Page One <\/a><\/span><\/p>\n

This means that if your computer or other hardware comes into contact with any new viruses, although your AV software may be able to detect them (though even this isn\u2019t certain), they will not be able to defend against the attack. Indeed, proactive detection, according to Drew Robb<\/a>, which \u201ccatches a virus before it infects your computer, is stalled at 80%.\u201d<\/span><\/p>\n

How your computer is threatened<\/b><\/span><\/p>\n

\"cyber-attack\"<\/a><\/span>So, what are the risks? What is all this malware out there designed to do, how does it do it, and what\u2019s the point?<\/span><\/p>\n

Well, firstly, it\u2019s not just your desktop that\u2019s vulnerable to malicious programs. Your laptop, tablet and smartphone a<\/span>re all potential targe<\/span>ts for viruses and hackers too. Cyber criminals are constantly on the lookout for ways in which they can steal your passwords, rob you <\/span>of your online banking details, or otherwise <\/span>exploit the informati<\/span>on on your machine for their financial benefit \u2013 and by installing viruses onto your computer is one of the ways in which they do this.<\/span><\/p>\n

Cybercriminals have become more adept and organized at launching hit-and-run attacks than ever before, explains Stu Sjouwerman of KnowBe4<\/a>:<\/span><\/p>\n

\u201cFully professional eastern European cyber mafias have hired the best and brightest, and are innovating malware at a furious pace. Today, the bad guys raise a malicious website, run their attack and then disappear after a few hours \u2013 before [anti-virus] companies have updated their malware definitions.\u201d<\/span><\/p>\n

These attacks come in many ways \u2013 below are just a few of them:<\/span><\/p>\n

Phishing<\/b><\/span><\/p>\n

P<\/span>\"phishing\"<\/a><\/span>hishing is a technique that cybercriminals have been increasingly adopting over the years. Not a virus as such, simply a scam \u2013 but precisely why any antivirus protection you have installed on your computer will be obsolete if you fall victim to the ploy.<\/span><\/p>\n

You\u2019ll receive an email from what looks like your bank. You click through to what appears to be your bank\u2019s websit<\/span>e, but is in fact just a very convincing facsimile. You\u2019re asked for your card number and password, and, if you type it in, all you\u2019re doing is handing this vital information over to the cybercriminal, giving them access to your real online banking account.<\/span><\/p>\n

Drive-by Downloads<\/b><\/span><\/p>\n

These <\/span>i<\/span>nfect existing websites. However, if you visit that website (and you may be sent an email link encouragi<\/span>ng you to do so), it will proceed to install malware onto your computer.<\/span><\/p>\n

Trojan Horse<\/b><\/span><\/p>\n

\"virus\"<\/a><\/span>These little nasties are embedded into small online applications \u2013 often screensavers and such like. If you download the screensaver and install it onto your computer, you are also installing the malware that has been written into the application.<\/span><\/p>\n

Persona<\/b><\/span>lized Trojan Horse<\/b><\/span><\/p>\n

These trojans work in pretty much the same way as above, however you\u2019re personally targeted for the attack rather than it just being left to chance.<\/span><\/p>\n

Again, it often works through the use of email. You will receive an email with a picture or other document attached (zip files are common). For whatever reason you\u2019re duped into opening the attached picture, thus opening the door for the malware to get into your computer.<\/span><\/p>\n

Ransomware<\/b><\/span><\/p>\n

\"cybercriminal\"<\/a><\/span>These usually use a delayed attack method, when sometime after you have downloaded a seemingly innocuous application or program \u2013 an update maybe, or even a ringtone \u2013 you suddenly see a pop up box on your computer. What you in fact downloaded was a piece of malware, and now the pop up box is telling you that it has locked down your computer \u2013 and it has.<\/span><\/p>\n

It will then demand money from you to unlock your files, quite often by sending a text with a given short code. Your phone provider will be billed the amount in question, who in turn will bill you at the end of the month, usually with a fine slapped on for good measure.<\/span><\/p>\n

So, h<\/b><\/span>ow much protection does antivirus software provide against these thre<\/b><\/span>a<\/b><\/span>ts?<\/b><\/span><\/p>\n

\"what<\/a><\/span>Simply put, not enough. Because of the sheer volume of malware out there floating around the commercial internet, anti-virus prog<\/span>rams alone are not enough to combat the problem. Indeed, some authorities, such as Mohammad Mannan, assistant professor at the Concordia Institute for Information Systems Engineering<\/a> in Montreal, have even gone so far as to suggest that they are \u201ctotally useless\u201d. Mannan again:<\/span><\/p>\n

\u201cIf you use [antivirus programs], you might even be vulnerable [to malware] to some extent.\u201d<\/span><\/p>\n

It\u2019s a question of figures, and the sheer amount of threats that are out there \u2013 a number which has grown significantly in the past decade. CBC News<\/a> reports that in 2002 there were an estimated 17 million known \u201cgood\u201d files out there on the commercial internet, with antivirus engines detecting 2 million \u201cbad\u201d ones. By 2012 the amount of good files had grown to 40 million, and the nefarious ones to 80 million.<\/span><\/p>\n

The problem with antivirus software<\/b><\/span><\/p>\n

\"problems<\/a><\/span>The sophistication of today\u2019s malware programs make it harder and harder for antivirus software to detect if there\u2019s a problem. Indeed, users often don\u2019t always even know that something phishy is happening on their comp<\/span>uters. Tony Anscombe of AVG<\/a>:<\/span><\/p>\n

\u201cMalware viruses used to be disruptive \u2013 if you got one, you knew you had it. Now, they\u2019re deceptive and hide in the background.\u201d<\/span><\/p>\n

Antivirus software<\/span><\/a>, in face of these ubiquitous threats, has inevitably become a multi-billion dollar industry. One of the reasons for this, in fact, is because users have to have it continuously updated to keep ahead \u2013 or rather just behind \u2013 the sophistication of new<\/span> malware threats. The problem is in the very nature of the antivirus software \u2013 it is reactive. It only responds to the specific malware that it is programmed to detect. All the cybercriminal has then<\/span> to do is make some slight modifications to the malware code, and the antivirus program becomes obsolete aga<\/span>in.<\/span><\/p>\n

The sheer number of malware variations make it effectively impossible for antivirus software to combat the problem. It just simply isn\u2019t possible to create a blanket program that keeps all threats out.<\/span><\/p>\n

So, what\u2019s the answer?<\/b><\/span><\/p>\n

Whitelisting<\/b><\/span><\/p>\n

\"whitelisting\"<\/a><\/span>Whitelisting, as you might expect, is the opposite of blacklisting. Since a blacklist of all of the malware sites in existence would, frankly, be far too difficult to compile, the answer, some believe, is in the creation of a whitelist, which contains only the approved \u2018safe\u2019 sites.<\/span><\/p>\n

The principle is rather similar to what Twitter uses to verify celebrity accounts. Since there became a proliferatio<\/span>n of bogus celebrity accounts on the site, rather than identifying all the fake ones, Twitter simply offered a verification of the legitimate ones, so other users could tell the real from the fake.<\/span><\/p>\n

Similarly, how whitelisting works is that when you surf the web, each time you visit a site a whitelist prompt <\/span>appears in your browser, letting you know whether the site is whitelisted or not. It is then up to you as the user whether to use the <\/span>site or escape from it.<\/span><\/p>\n

Education<\/b><\/span><\/p>\n

\"learn\"<\/a><\/span>Malware is very often the result of user intervention \u2013 they may have clicke<\/span>d on a phishing link or opened an attachment. They may even have clicked through on something in social media which uses social engineering tactics (such as \u2018clickbait\u2019 \u2013 \u201cyou\u2019ll never believe what happened when \u2026\u201d) to entice the user to click. It\u2019s only by educating users on the risks, especially when it comes to businesses that must be compliant, that they\u2019ll be able to understand and resist clicking.<\/span><\/p>\n

File monitoring<\/b><\/span><\/p>\n

Managed IT services are now replacing the old \u2018break-fix\u2019 model where IT support companies would come and fix a problem after it had occurred. The power of the cloud and monitoring services<\/a> should be utilized wherever possible to stop malware entering the business environment and getting to the end user.<\/span><\/p>\n

So is<\/b><\/span> it time to completely abandon antivirus software?<\/b><\/span><\/p>\n

\"questions\"<\/a><\/span>No. Of course not. Antivirus software<\/a>, although becoming increasingly outdated, still forms the first line of defense. It does no harm to have it installed on your computer, so there is no reason to remove it. It is rather like locking your front door and windows when leaving the house. Yes, burglars can still get in, but you\u2019re not holding the door open for them. They will have to be motivated, and you won\u2019t be as easy a target as the house next door who decided to remove all doors and windows altogether.<\/span><\/p>\n

Indeed, Sjouwerman agrees<\/a>:<\/span><\/p>\n

\u201cCompanies still should have [antivirus software] \u2013 at least for now, as well as firewalls, a strong whitelist strategy and user training.\u201d<\/span><\/p>\n

\"how<\/a><\/span>So, although not completely obsolete, antivirus software is certainly becoming less and less useful, and is almost definitely no longer effective to the extent that it can function as complete protection on its own. The advice is to keep using it, but bolster with other techniques, but the on-going war against malware and the cyber-criminal will not be won with antivirus software alone.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Viruses, trojans, worms \u2013 malware (a contraction of \u2018malicious software\u2019) come in many forms. Even though these threats have been around for decades, the volume has increased steadily in line with overall internet usage. What\u2019s more, just as the sophistication and capabilities of technology has improved over the years, so too has the proficiency of […]<\/p>\n","protected":false},"author":2,"featured_media":2938,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,13,6,8],"tags":[],"class_list":["post-2884","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general-it","category-pc-security","category-tech","category-windows"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/2884","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/comments?post=2884"}],"version-history":[{"count":5,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/2884\/revisions"}],"predecessor-version":[{"id":3444,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/posts\/2884\/revisions\/3444"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/media\/2938"}],"wp:attachment":[{"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/media?parent=2884"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/categories?post=2884"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.poweradmin.com\/blog\/wp-json\/wp\/v2\/tags?post=2884"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}