Members
Stats
  • Total Posts: 28531
  • Total Topics: 8240
  • Online Today: 920
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)












Author Topic: New Study: Antivirus Software Misses 15% of Malware  (Read 1918 times)

0 Members and 1 Guest are viewing this topic.

georgecloner

  • SCF VIP Member
  • *****
  • Posts: 171
  • KARMA: 16
  • Gender: Male
New Study: Antivirus Software Misses 15% of Malware
« on: 15. March 2009., 06:53:26 »


Security company Damballa reported that about 3 to 5 percent of all systems in an enterprise network are infected with bot-related malware — even within organizations running up-to-date anti-malware tools.

Damballa protects businesses from targeted attacks used for organized, online crime. Their global approach rapidly isolates the command-and-control needed to launch multi-network attacks.

Antivirus software discovered only 53 percent of malware samples, according to data gathered by Damballa in a six-month case-study that used McAfee Scan Engine v5.3.00 to scan more than 200,000 malware samples. Another 32 percent were found later on, and 15 percent were not detected at all. The average delay in detection and remediation was 54 days.

“The window of catch-up is 54 days…that’s a long delay,” says Bill Guerry, vice president of product management for Damballa. “So if you’re relying on AV, it’s able to detect a little over half of malware immediately.”

Damballa stated that the malware gap with today’s antivirus products is a contributing factor to the enterprise bot problem. “One of our clients said it’s not unusual for them to see 100 new [botnet] compromises in a day [in its environment],” Guerry says.

In connection with its study, Damballa also rolled out its first hardware product, the Failsafe 3.0 security hardware appliance, which detects targeted, bot-driven attacks. Damballa traditionally has offered a “cloud” or software as a service approach to bot detection and protection services, focusing on botnet command and control infrastructure to detect malicious activity within an organization.

Failsafe 3.0 includes a management console and will ship this month, with pricing starting at $100,000 for 10,000 nodes. It’s aimed at organizations that prefer to keep their botnet-detection “locally in the cloud,” Guerry says. “This is sensitive information to these clients,” he says.

Damballa has also invested in building a prototype, host-based botnet-remediation tool that it hopes to release this year. The so-called Remediator will let organizations handle remediation on a host-by-host basis. “It’s not an AV agent running all the time…you can load and remove it,” Guerry says.

Steve Linowes, CEO at Damballa, says the goal of Remediator is not to replace AV tools, but to assist the help desk. “Companies we work with have defined processes in place already to handle incidents like this,” he says. “They have help desk support and processes for remediating their compromised assets. Our desire is to fit into those processes they have in place.”

{ATOMICSUB}
Creativity is a mental and social process involving the generation of new ideas or concepts, or new associations of the creative mind between existing ideas or concepts.

Samker's Computer Forum - SCforum.info

New Study: Antivirus Software Misses 15% of Malware
« on: 15. March 2009., 06:53:26 »




Samker

  • SCF Administrator
  • *****
  • Posts: 7206
  • KARMA: 291
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum
Re: New Study: Antivirus Software Misses 15% of Malware
« Reply #1 on: 15. March 2009., 08:15:40 »
Quote
Antivirus software discovered only 53 percent of malware samples, according to data gathered by Damballa in a six-month case-study that used McAfee Scan Engine v5.3.00 to scan more than 200,000 malware samples. Another 32 percent were found later on, and 15 percent were not detected at all. The average delay in detection and remediation was 54 days.

 :o

I think that this isn't true, or maybe for systems which have update only by month.  :)


F3RL

  • SCF Advanced Member
  • ***
  • Posts: 171
  • KARMA: 18
  • Gender: Male
Re: New Study: Antivirus Software Misses 15% of Malware
« Reply #2 on: 15. March 2009., 12:34:29 »
As long as you do legimate things on net, you have less possibility to get those nasty malware or bots installed on the machine.
well? understand ma bad English.

 

With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Verification:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising