Cyber Security Institute
§ Current Worries
Top 3 Worries
- Regulations
- Old Firewall Configurations
- Security Awareness
§ Listening
For the best information
- The underground
- Audible
- Executive Excellence
- Music (to keep me sane)
§ Watching
For early warnings
- 150 Security Websites
- AP Newsfeeds
- Vendors
Tuesday, July 17, 2007
Symantec Unveils Anti-Botware
It may be the start of a whole new security product category, anti-botware: Symantec will roll out Norton AntiBot, a real-time bot detection and removal software package.
Antivirus and anti-spyware packages typically are unable to catch or protect client machines from advanced botnet infections—signature-based technology can’t keep up with botnets that are constantly reinventing themselves.
Ed Kim, director of product management for Symantec, says the company’s new software is a stand-alone package that adds another layer of protection and works with existing AV products either from Symantec or other vendors. “Other behavioral [technologies] use emulation and create a secure sandbox where they allow the threat to run, but that tends to be resource-intensive…
Symantec recently reported that there were over 6 million active bots during the last six months of 2006, a nearly 30 percent increase from the first half of the year.
Rob Enderle, principal with the Enderle Group, says the Symantec product is the only one he’s aware of that can “maintain a high hit rate” on constantly evolving and obfuscating bots.
http://www.darkreading.com/document.asp?doc_id=129169&WT.svl=news1_1