About InfoWorld : Advertise : Subscribe : Contact Us : Awards : Events : Store
InfoWorld HomeNewsTest CenterOpinionsProduct GuideTechIndex
 COLUMN ARCHIVE  FORUMS
 

COLUMN

 
Security Adviser
P.J. Connolly

Hold the hype

I DON'T KNOW about you, but I'm tired of reading in industry journals about how awful it is that anti-virus vendors try to drum up hype whenever there's a new virus. To read some of the stuff cropping up across the Web, you'd think that anti-virus software is a complete scam along the lines of extended warranties or rustproofing undercoats.

   ADVERTISEMENT
  

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

RELATED LINKS
»  IE 7 bug reopens debate over patch responsibilities
»  Woman ordered to pay for file-sharing will appeal
»  McAfee to buy SafeBoot for $350M
»  Security RSS feed 

IDG ENTERPRISE NETWORK
Research Reports  (CIO)
Ask the Expert  (CIO)

TOP NEWS 


IT SOLUTION SEARCH
The problem isn't with the vendors, or even the trade press. Vendors take a lot of grief from those who are convinced that much of the virus problem is overblown. Those folks are in denial. Even if many of the virus derivatives in my definitions file have never been seen outside a lab, I've always figured that if one bright spark in California can come up with a new way to mess with my machines, there's nothing stopping someone in Bulgaria, Bangladesh, or wherever from independently discovering the same trick.

I've found that my colleagues on the news desks of magazines I've written for also do a good job of putting virus outbreaks into proper perspective. Occasionally, though, we do make the mistake of forgetting that our sources don't have a perfect view of the future.

The cracks in our sources' crystal balls came up again a few weeks ago when press reports of the "chunked-encoding" vulnerabilities in the Apache Web server quoted a security guru -- who shall go nameless because he doesn't need any more roasted crow sandwiches -- saying, in effect, that because there weren't any known exploits, the bugs weren't that serious for now. If I'm not mistaken, someone posted a tool making use of the exploits within 48 hours after that statement hit the Web, once again demonstrating how quickly the future becomes now.

Of course, there are some who think we can have it both ways. If you believe them, we're guilty of ignoring "unfashionable" viruses, such as Klez, while at the same time paying too much attention to the JPEG proof-of-concept worm that turned up last month. I can't blame anyone for being as confused as I am over this attitude.

So who's to blame for virus hype? My vote goes to mainstream media: your local newspaper and television news. After all, when you have to completely refresh your content every day, a slow news day means that material ordinarily buried in the furniture advertisements winds up on the front page -- or in TV terms, gets teased all the way through prime time. For some reporters, it's just easier to recycle the multitude of vendor press releases than to actually explain to readers and viewers why this particular virus is not simply crying "wolf!"

It's summer here in California, and the most popular public service announcements are exhorting us to save power. It seems to me that it's time for some PSAs on basic computer security, in between baseball games.

Why should corporate IT care about consumer computer security? Because end-users are always the weakest link -- and that's reality, hold the hype.


P.J. Connolly (pj_connolly@infoworld.com) covers collaboration and security for the InfoWorld Test Center.




RELATED SUBJECTS

Security

MORE >


SPONSORED WHITE PAPERS
EMC - Lower costs and improve reliability-Get the EMC CLARiiON white paper!
Ciphertrust - Are you ready for Sobig.G? Learn how to protect your email systems.
CDW - Personal attention. CDW. The Right Technology. Right Away.
EMC - Explore key performance features and capabilities of EMC ControlCenter 5.1.1.
Intel - Free Intel white paper shows you how to deploy a secure wireless LAN
Cisco - FREE WHITE PAPER: BLUEPRINT to design and implement secure VPNs
Verity, Inc. - "Mass Consolidation Hits the Web-Search Market"
McDATA - Download a FREE storage consolidation white paper from McDATA(R).
Lucent Technologies - Overcoming Common Firewall Limitations
Lucent Technologies - Leverage Your Mobile High Speed Data Access. Download Free White Paper!
Nokia - Get the scoop! Mobilizing business white papers & case studies.
BMC Software - Maximize the Potential of Enterprise Data: Free white paper!
Network Associates - Free white paper - Strategies for Optimizing Network Costs and Benefits
Entrust - Manage identities across applications. Improve productivity.
Stalker Software - CommuniGate Pro - Transform your Email and Calendaring
Remedy - A NEW Gartner Research Note:Producing Quality IT Services

Search the IDG White Paper Library:


SPONSORED LINKS

INFOWORLD MARKETPLACE


» IT Compliance Conference: Nov. 5-7 in San Diego
Best Practices, Peer Experiences, & Expert Advice for Building a Defensible IT Compliance Program
» FREE Sophos Threat Detection Test
Is your AV catching everything it should? Free virus, spyware and adware scan.
» IT Audit Checklists
Prepare for your next internal IT audit. Checklists cover security, risk management, PCI, and more.
» FREE White Paper: Mitigating Rock Phish Attacks
Standard anti-phishing methods cannot defeat complex Rock Phish attacks. Learn how to fight back...
» Apply BPM and ITIL at your IT Help Desk
ServiceWise brings BPM to complete IT service while eliminating integration cost. Learn more here.




 HOME  NEWS  TEST CENTER  OPINIONS  PRODUCT GUIDE  TECHINDEX   About : Advertise : Subscribe : Contact Us : Awards : Events 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy

All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses, phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

Computerworld :: Network World :: CIO :: PC World :: Darwin :: CMO :: CSO
IT Careers :: JavaWorld :: Macworld :: Mac Central :: Playlist :: GamePro :: GameStar :: Gamerhelp
ITWorld Canada :: Computerwoche :: Techworld UK :: tecChannel :: IDG.se :: IDG.no