Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Effective Security Can Be Simple (sometimes) | Main | Google Gets a Free Ride on Security »

When will Google get into Security?

Joris Evers at CNET News is reporting on a trend we've known about for a while, the shift from email based to Web based threats. In Web threats to surpass e-mail pests Evers notes:

Security tools for e-mail have become commonplace, but the same isn't true for Web traffic. Security firms have found it tough to secure what comes into a network and computers over port 80, the network port used to browse the Web using the hypertext transfer protocol, or HTTP.

Sure, we have tools that take advantage of the way email works. For example, it uses a store and forward model so we can analyze and quarantine. Now we need tools that take advantage of Web threat characteristics, like the fact that the malicious code is sitting on a server somewhere, and sites that have links to site hosting malicious code probably shouldn't be trusted.

Tools like McAfee Site Advisor offer an assessment of trustworthiness of a site. But who can index all the information in the world, including malware? Google. They have the infrastructure to crawl the Web and analyze traffic patterns with tools like Google Analytics.

So the bad guys are shifting to Web based attacks. Ok that's expected but we have appliances for scanning traffic as it comes into and leaves a network. We do need someone to take on the challenge of finding malicious code where it rests, not just when it is in transit. What do you think; will we be hearing about security tools from Google Labs anytime soon?

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/285

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net