Mike Foster's IT Security and Best Practices Blog » Stopping Network Viruses http://www.fosterinstitute.com/blog Thu, 12 Jan 2012 04:00:36 +0000 en hourly 1 http://wordpress.org/?v= 2006-2007 mike@fosterinstitute.com (Mike Foster's IT Security and Best Practices Blog) mike@fosterinstitute.com (Mike Foster's IT Security and Best Practices Blog) http://www.fosterinstitute.com/blog/wp-content/plugins/podpress/images/powered_by_podpress.jpg Mike Foster's IT Security and Best Practices Blog http://www.fosterinstitute.com/blog 144 144 Mike Foster's IT Security and Best Practices Blog Mike Foster's IT Security and Best Practices Blog mike@fosterinstitute.com no no Is anti-virus obsolete? http://www.fosterinstitute.com/blog/obsolete/ http://www.fosterinstitute.com/blog/obsolete/#comments Thu, 29 Apr 2010 04:00:24 +0000 Mike Foster http://www.fosterinstitute.com/blog/?p=483 The problem with anti-virus programs these days is that so many viruses come out every hour that anti-virus programs can hardly keep their list of virus signatures up to date. If your anti-virus program doesn’t know a virus is “bad” until hours after the virus arrived, you are still infected and it may be too late.

A strategy that keeps gaining ground is the concept of “white listing” applications. In plain English, this means your computers have a list of programs that are on the “approved” list to run, such as Word, Firefox, Acrobat, Excel, etc.

Then, any other program cannot run. Period. That means virus 1, virus 2, virus 999, etc. is not allowed to run. This solves the whole problem of needing anti-virus. In theory, even if a virus does come into your network through e-mail, web site drive by download, or Ernie in shipping carrying in an infected memory stick, it doesn’t matter. The virus cannot run anyway!

The challenge lies in your IT department being able to keep an organized white list of “approved” programs. When an update to a program arrives, the new update has to be listed too or it will not run.

Many providers are offering solutions including Bit9 Parity and Lumension Application Control and there are constant advancements in making administration even easier.

Yes, some day anti-virus may be old news and never used again.

]]> http://www.fosterinstitute.com/blog/obsolete/feed/ 0 Executives say their challenge is fighting viruses http://www.fosterinstitute.com/blog/fighting-viruses/ http://www.fosterinstitute.com/blog/fighting-viruses/#comments Thu, 03 Dec 2009 04:00:15 +0000 Mike Foster http://www.fosterinstitute.com/blog/?p=339 Before every IT Vital Systems Review, I always ask the executives what their challenges are. On a recent survey the CEO answered “fighting viruses.” That’s because it isn’t the executive’s job to fight viruses—that is the job of their IT professionals. It is the executive’s responsibility to protect the assets of the company, employees and clients.

The IT professionals can use tools like anti-virus, firewalls, application and OS patches, etc. Many IT professionals are not using the tools as effectively as they could, and frequently aren’t using them at all on one or more computers. None of the tools are “set and forget”—all of them have to be monitored.

I feel the executive’s real challenge is, “I don’t know how to help my IT professional fight viruses.”

Responsible executives:

  • Provide enough uninterrupted time for the IT professionals so the IT professionals can get their work done.
  • Allow ongoing training for the IT professionals to keep up with ever changing technology.
  • Hold the IT department accountable for fixing issues discovered during an audit.
  • Provide managerial support for policies that support security—such as forcing computer screen savers to lock after a period of inactivity.
]]> http://www.fosterinstitute.com/blog/fighting-viruses/feed/ 0 How’d That Virus Get Through My Firewall? It Probably Went AROUND It! http://www.fosterinstitute.com/blog/viruses-and-firewalls/ http://www.fosterinstitute.com/blog/viruses-and-firewalls/#comments Mon, 11 Feb 2008 16:20:27 +0000 Mike Foster http://www.fosterinstitute.com/blog/how%e2%80%99d-that-virus-get-through-my-firewall-it-probably-went-around-it.html Have you ever had a virus infect your company IT network and someone say to you, “Wow. I don’t understand how that got through our firewall!” When that happens, there’s a good chance that someone brought the virus in from the outside by physically carrying a laptop or some form of removable media into the office right past the firewall. This allowed the infection to go “around” instead of “through” the firewall.

That’s why you need to secure your the individual workstations as well as the network. And whether you have three computers or 300, you need to have everyone on a domain model, not workgroup model, with a dedicated server. That will give you a central management point so you can take care of all the machines automatically.

Also realize that your company’s computer network is only as strong as its weakest link. Often I hear in companies that the CEO won’t let anyone from IT touch his or her computer. But if all the other computers in the network are up to date except the CEO’s, your company is still vulnerable. So you have to make sure everyone’s computer, even the CEO’s, is protected.

This is why it is so critical that you understand the importance of securing your network as well as individual workstations, and visa versa. When your IT professional says they want to make your computer safe, let them — that’s what they get paid to do!

What are your thoughts on this topic?

]]> http://www.fosterinstitute.com/blog/viruses-and-firewalls/feed/ 0