Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« 10 Steps for Web Application Deployment | Main | PHP Vulnerabilities: Plenty of Blame to Go Around »

Points from Vista Security Articles

Vista's been out long enough for some hard looks at it's security and here are some findings:

From Symantec: Out of the Box, Vista Prone to Legacy Threats:

"There are existing codes that can survive Vista without being modified— [certain] keyloggers, worms, Trojans, and spyware are able to survive," said Symantec Research Scientist Ollie Whitehouse

and

rootkit writers use the same techniques as PatchGuard to ensure their actions aren't detected.

Security vendors are releasing Vista-ready products but diffuculties remain according to PC World

Although leading security vendors such as Symantec Corp., McAfee Inc. and Trend Micro Inc. have released updates or patches to make some or all of their products Vista-compatible, many others remain deeply entrenched in testing Vista versions of their tools.

Michael Coob offers this opinion about Vista in SearchSecurity

My advice to those considering early adoption: don't do it. Instead, wait and see if any exploits or flaws are found. Now that Vista is available to everyone, its security features are subject to the accelerated cycle of real-world vulnerability testing, and that will be telling.

We have a assembled all articles published at this site for the last six months into a single, easily downloaded PDF file. The Messaging and Web Security Essential Series provides useful information on a range of topics, from email compliance and combating spam to vulnerability scanning and Web application testing. We hope you find it useful.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/241

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net