Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 21 guests online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Malware
ANTIVIRUS-Yes or No?
EH-Net
May 25, 2013, 01:08:33 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Malware
(Moderator:
don
) >
ANTIVIRUS-Yes or No?
Pages:
1
[
2
]
Go Down
« previous
next »
Print
Author
Topic: ANTIVIRUS-Yes or No? (Read 15709 times)
0 Members and 1 Guest are viewing this topic.
Equix3n-
Sr. Member
Offline
Posts: 386
Re: ANTIVIRUS-Yes or No?
«
Reply #15 on:
February 14, 2009, 01:54:58 AM »
Quote from: Stifler on February 14, 2009, 01:35:18 AM
Since you guys are on the topic of Linux, I have a couple questions. I've never used Linux before but I hear good things about it, so my questions are... Is it free like I've heard? Can it be installed on a computer designed for windows? And if so, where can I get it?
Most of the Linux distributions are free. Linux is more a kernel from which various operating systems have been designed. Each of these OS is called a linux distribution. Currently there are hundreds of distributions-both free and commercial.
You can gather more info. at
http://en.wikipedia.org/wiki/Linux
http://www.linux.org/
You can get all the Linux distributions at
http://distrowatch.com/
Since you have never used Linux I suggest you start off with
Ubuntu
which is a free Linux distribution. It's very easy to use.
http://www.ubuntu.com/
The download link is here:
http://www.ubuntu.com/getubuntu/download
It's a 700 MB iso. If you have a slow internet there's an option of torrent download on the page too.
It can be used with windows. However you have to partition the disk before installing it. Here are some links to help you out.
https://help.ubuntu.com/community/WindowsDualBoot
If you have problems in dual booting you can install Linux on a virtual machine.
http://cmsproducer.com/Ubuntu-Linux-Windows-VMware-Server
http://www.psychocats.net/ubuntu/virtualbox
«
Last Edit: August 06, 2010, 04:33:22 PM by Equix3n-
»
Logged
timmedin
Sr. Member
Offline
Posts: 469
Re: ANTIVIRUS-Yes or No?
«
Reply #16 on:
February 14, 2009, 03:08:45 PM »
Quote from: Stifler on February 08, 2009, 08:39:38 AM
2nd. You can never have too much security.
Not to be pedantic, but there is a "too much". A pair of scissors will give you perfect security from the internet (cut the cable), but there are always trade offs. Similarly, there is a trade off with AV on your host. The question is, are you willing to accept the risk is the question. If I have a box that I only use for gaming and AV slows it down, then I am not going to install AV since the loss would be low (no PII and nothing to lose). I am not saying that people shouldn't use AV, just that sometimes it doesn't warrant it.
I don't use it on *nix, but I do use it on Windows. I don't use it on my nix computer since I browse differently on that box, I have no personal info on that box, and the common exploits for my platform are rare.
Logged
twitter.com/timmedin |
http://blog.securitywhole.com
Ne0
Jr. Member
Offline
Posts: 62
Re: ANTIVIRUS-Yes or No?
«
Reply #17 on:
February 17, 2009, 03:00:25 AM »
according to the top notch security researcher's and network audit engineers' and security manager's they are opting for going restart of Internet from begining, as the sql injections, clickjacking, spywares, virus, spams, botnets, are having there own virtual net and spreading each and every second , most of them should be knowing that an unpatched windows is not safe more than 5 min of its connection with net
means and unpatched windows machine gets effected within 5 min, and the thing to worry abt the restart of NET is , how safe is our data, info and how is the world going to cop with the new security standards....
we just need to wait and watch
Logged
timmedin
Sr. Member
Offline
Posts: 469
Re: ANTIVIRUS-Yes or No?
«
Reply #18 on:
February 17, 2009, 07:50:54 AM »
Ne0 I don't see that happening. Legacy stuff never goes away. Go to your bank or the the airport and look at the terminals they use from 30+ years ago. While the look of the web may change, getting rid of old stuff is painful.
Logged
twitter.com/timmedin |
http://blog.securitywhole.com
dalepearson
Sr. Member
Offline
Posts: 357
Re: ANTIVIRUS-Yes or No?
«
Reply #19 on:
February 17, 2009, 09:01:42 AM »
My response isn’t particularly a specific AV related one. Although I do believe it is still worthwhile, as yes it won’t catch everything, but it will catch what it knows about and surely this is better than nothing.
Moving forward we will see things moving more and more to heuristics and behavioural based, as opposed to signature, but it will always have its place.
As with everything, and especially with security what tools you use, and the level of tooling will should depend on the risks and associated cost.
It can be difficult to strike the right balance, but availability and usability is something I feel people often overlook, just focusing on the confidentiality and integrity aspects.
Logged
:: Subliminal Hacking ::
/
:: Security Active Blog ::
sgt_mjc
Sr. Member
Offline
Posts: 294
Re: ANTIVIRUS-Yes or No?
«
Reply #20 on:
February 17, 2009, 09:58:41 AM »
Ne0 and Tim,
Both of you have a good points. The Internet was based on trust from the very start. That really wasn't a problem when you network was just you stuff. As it grew, and became the Internet we all know and love today, that trust never really went away. Take SNMP, telnet, or ftp for example. These protocols do a good job for their roles and work well when trust is not an issue. Today, though trust is an issue and needs to be incorporated from the start. Unfortunately, as Tim mentioned, it’s a painful thing to do away with legacy apps. Look at the issues Vista have with backwards compatibility when it first rolled out. Older networking equipment may only support ftp or telnet rather than ssh.
Yes an AV helps with protecting systems form malicious crap. No, it is not the end all be all of security. Until we figure out how to "trust" in a responsible manner, it is a measure of protection that we all should have.
Logged
Mike Conway
CISSP
CompTia Security +
C|EH
Ne0
Jr. Member
Offline
Posts: 62
Re: ANTIVIRUS-Yes or No?
«
Reply #21 on:
February 19, 2009, 01:15:39 AM »
thanks for both Sgt and Tim, i know gov are still dealing with old IT structure they are least botherd for upgrading it cause they just have time and money for investing in physical security , but todays war is no more physical its more over virtual, gov's have there more trust on there physical security at border or in some other continent, but wht abt the VIRTUAL, they need to trust there IT guys too who have been pointing there fingers towards there machine or network, todays world is taken over by SPAM, SCAM, TROJAN, BOTS, BOTS have become more clever and more tough, top ppl who sit behind the table have to open op there minds rust of there old brains and think towards todays senario. lets cross our fingers...
Logged
timmedin
Sr. Member
Offline
Posts: 469
Re: ANTIVIRUS-Yes or No?
«
Reply #22 on:
February 19, 2009, 09:12:35 AM »
Ne0, it isn't just gov that has legacy systems. If there a 24 hours shop or a mission critical system it is nearly impossible to upgrade, especially as the size increases.
I've worked on the operational side of things and the most imporatant peice to the business is uptime. There is always a tradeoff with security, and there should be. It is always about the cost/risk or cost/benefit balance.
Logged
twitter.com/timmedin |
http://blog.securitywhole.com
sgt_mjc
Sr. Member
Offline
Posts: 294
Re: ANTIVIRUS-Yes or No?
«
Reply #23 on:
February 20, 2009, 11:11:04 AM »
Ne0,
On the government side and business side of things, there is a tradeoff between security and functionality. It cost money to upgrade hardware/software. And then depending on the environment, it must go through testing to ensure that the upgrade doesn't break anything. Of course if there is a legacy application, it would need to be rewritten. That too costs money. Most businesses and even government contracts have a finite amount of funds budgeted for their projects. Then of course there is the trade off for down time to actually do the upgrade to the production systems. This cost money for the upgrade itself and cost money in lost productivity while the system is down and training time for employees once the system is back up.
Think of the switch people made going from XP to Vista or Office 2003 to 2007. Users had to learn how to do things over that they used to do without thinking about it. This is lost productivity. We live in an imperfect world and we can only do our bests with regards to security. That's why we are needed. We are there to keep things from getting too bad and impacting the businesses we support.
Logged
Mike Conway
CISSP
CompTia Security +
C|EH
Ne0
Jr. Member
Offline
Posts: 62
Re: ANTIVIRUS-Yes or No?
«
Reply #24 on:
February 21, 2009, 01:52:49 AM »
Tim & Sgt
i really agree with both of you , we are saying the same points here, the Main thing is Gov shoudnt be late in upgrading there systems, by the time they take a ahead the technology will be 3 steps ahead of them .....
Logged
Pages:
1
[
2
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(30) by
don
Tools
: Symbolic Exploit Assistant project is looking for collaborators
(0) by
galapag0
Greetings
: Hi from the UK
(5) by
prats84
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(9) by
prats84
Network Pen Testing
: Want a challenge? Want a GXPN practice exam?
(0) by
ajohnson
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(1) by
prats84
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.