Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 21 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Malwarearrow ANTIVIRUS-Yes or No?
EH-Net
May 25, 2013, 01:08:33 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 [2]   Go Down
  Print  
Author Topic: ANTIVIRUS-Yes or No?  (Read 15709 times)
0 Members and 1 Guest are viewing this topic.
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #15 on: February 14, 2009, 01:54:58 AM »

Since you guys are on the topic of Linux, I have a couple questions. I've never used Linux before but I hear good things about it, so my questions are... Is it free like I've heard? Can it be installed on a computer designed for windows? And if so, where can I get it?

Most of the Linux distributions are free. Linux is more a kernel from which various operating systems have been designed. Each of these OS is called a linux distribution. Currently there are hundreds of distributions-both free and commercial.
You can gather more info. at
http://en.wikipedia.org/wiki/Linux
http://www.linux.org/

You can get all the Linux distributions at
http://distrowatch.com/
 
Since you have never used Linux I suggest you start off with Ubuntu which is a free Linux distribution. It's very easy to use.
http://www.ubuntu.com/

The download link is here:
http://www.ubuntu.com/getubuntu/download

It's a 700 MB iso. If you have a slow internet there's an option of torrent download on the page too.

It can be used with windows. However you have to partition the disk before installing it. Here are some links to help you out.
https://help.ubuntu.com/community/WindowsDualBoot

If you have problems in dual booting you can install Linux on a virtual machine.
http://cmsproducer.com/Ubuntu-Linux-Windows-VMware-Server
http://www.psychocats.net/ubuntu/virtualbox

« Last Edit: August 06, 2010, 04:33:22 PM by Equix3n- » Logged
timmedin
Sr. Member
****
Offline Offline

Posts: 469



View Profile WWW
« Reply #16 on: February 14, 2009, 03:08:45 PM »

2nd. You can never have too much security.

Not to be pedantic, but there is a "too much". A pair of scissors will give you perfect security from the internet (cut the cable), but there are always trade offs. Similarly, there is a trade off with AV on your host. The question is, are you willing to accept the risk is the question. If I have a box that I only use for gaming and AV slows it down, then I am not going to install AV since the loss would be low (no PII and nothing to lose). I am not saying that people shouldn't use AV, just that sometimes it doesn't warrant it.

I don't use it on *nix, but I do use it on Windows. I don't use it on my nix computer since I browse differently on that box, I have no personal info on that box, and the common exploits for my platform are rare.
Logged

twitter.com/timmedin | http://blog.securitywhole.com
Ne0
Jr. Member
**
Offline Offline

Posts: 62


View Profile
« Reply #17 on: February 17, 2009, 03:00:25 AM »

according to the top notch security researcher's and network audit engineers' and security manager's they are opting for going restart of Internet from begining, as the sql injections, clickjacking, spywares, virus, spams, botnets, are having there own virtual net and spreading each and every second , most of them should be knowing that an unpatched windows is not safe more than 5 min of its connection with net
means and unpatched windows machine gets effected within 5 min, and the thing to worry abt the restart of NET is , how safe is our data, info and how is the world going to cop with the new security standards....
we just need to wait and watch
Logged
timmedin
Sr. Member
****
Offline Offline

Posts: 469



View Profile WWW
« Reply #18 on: February 17, 2009, 07:50:54 AM »

Ne0 I don't see that happening. Legacy stuff never goes away. Go to your bank or the the airport and look at the terminals they use from 30+ years ago. While the look of the web may change, getting rid of old stuff is painful.
Logged

twitter.com/timmedin | http://blog.securitywhole.com
dalepearson
Sr. Member
****
Offline Offline

Posts: 357


View Profile WWW
« Reply #19 on: February 17, 2009, 09:01:42 AM »

My response isn’t particularly a specific AV related one. Although I do believe it is still worthwhile, as yes it won’t catch everything, but it will catch what it knows about and surely this is better than nothing.
Moving forward we will see things moving more and more to heuristics and behavioural based, as opposed to signature, but it will always have its place.

As with everything, and especially with security what tools you use, and the level of tooling will should depend on the risks and associated cost.
It can be difficult to strike the right balance, but availability and usability is something I feel people often overlook, just focusing on the confidentiality and integrity aspects.
Logged

sgt_mjc
Sr. Member
****
Offline Offline

Posts: 294


View Profile
« Reply #20 on: February 17, 2009, 09:58:41 AM »

Ne0 and Tim,

Both of you have a good points. The Internet was based on trust from the very start. That really wasn't a problem when you network was just you stuff. As it grew, and became the Internet we all know and love today, that trust never really went away. Take SNMP, telnet, or ftp for example. These protocols do a good job for their roles and work well when trust is not an issue. Today, though trust is an issue and needs to be incorporated from the start. Unfortunately, as Tim mentioned, it’s a painful thing to do away with legacy apps. Look at the issues Vista have with backwards compatibility when it first rolled out. Older networking equipment may only support ftp or telnet rather than ssh.

Yes an AV helps with protecting systems form malicious crap. No, it is not the end all be all of security. Until we figure out how to "trust" in a responsible manner, it is a measure of protection that we all should have.
Logged

Mike Conway
CISSP
CompTia Security +
C|EH
Ne0
Jr. Member
**
Offline Offline

Posts: 62


View Profile
« Reply #21 on: February 19, 2009, 01:15:39 AM »

thanks for both Sgt and Tim, i know gov are still dealing with old IT structure they are least botherd for upgrading it cause they just have time and money for investing in physical security , but todays war is no more physical its more over virtual, gov's have there more trust on there physical security at border or in some other continent, but wht abt the VIRTUAL, they need to trust there IT guys too who have been pointing there fingers towards there machine or network, todays world is taken over by SPAM, SCAM, TROJAN, BOTS, BOTS have become more clever and more tough, top ppl who sit behind the table have to open op there minds rust of there old brains and think towards todays senario. lets cross our fingers...
Logged
timmedin
Sr. Member
****
Offline Offline

Posts: 469



View Profile WWW
« Reply #22 on: February 19, 2009, 09:12:35 AM »

Ne0, it isn't just gov that has legacy systems. If there a 24 hours shop or a mission critical system it is nearly impossible to upgrade, especially as the size increases.

I've worked on the operational side of things and the most imporatant peice to the business is uptime. There is always a tradeoff with security, and there should be. It is always about the cost/risk or cost/benefit balance.
Logged

twitter.com/timmedin | http://blog.securitywhole.com
sgt_mjc
Sr. Member
****
Offline Offline

Posts: 294


View Profile
« Reply #23 on: February 20, 2009, 11:11:04 AM »

Ne0,

On the government side and business side of things, there is a tradeoff between security and functionality. It cost money to upgrade hardware/software. And then depending on the environment, it must go through testing to ensure that the upgrade doesn't break anything. Of course if there is a legacy application, it would need to be rewritten. That too costs money. Most businesses and even government contracts have a finite amount of funds budgeted for their projects. Then of course there is the trade off for down time to actually do the upgrade to the production systems. This cost money for the upgrade itself and cost money in lost productivity while the system is down and training time for employees once the system is back up.

Think of the switch people made going from XP to Vista or Office 2003 to 2007. Users had to learn how to do things over that they used to do without thinking about it. This is lost productivity. We live in an imperfect world and we can only do our bests with regards to security. That's why we are needed. We are there to keep things from getting too bad and impacting the businesses we support.
Logged

Mike Conway
CISSP
CompTia Security +
C|EH
Ne0
Jr. Member
**
Offline Offline

Posts: 62


View Profile
« Reply #24 on: February 21, 2009, 01:52:49 AM »

Tim & Sgt
i really agree with both of you , we are saying the same points here, the Main thing is Gov shoudnt be late in upgrading there systems, by the time they take a ahead the technology will be 3 steps ahead of them .....
Logged
Pages: 1 [2]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.058 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.