Antivirus is dead?

I often joke about the reputation we analysts have for wild hyperbole and speculation but I also realize that some of this well deserved. For example, one frequent analyst diatribe is the "technology X is dead" rap. Point to some technology and become the industry beacon who foretells its demise. Someone resurrects this tired strategy every few years.

The latest version of this old analyst song is that "antivirus is dead." The theory states that new threats are simply too fast, stealthy, and targeted for tried-and-true antivirus software from vendors like McAfee, Symantec, and Trend Micro. After all, antivirus software operates on an a posteriori model where antivirus vendors find malicious code in the wild, develop software signature defenses, and then distribute these signatures to customers. The "antivirus is dead" crowd believes that this model can no longer keep up.

As a member of the brotherhood of industry analysts, I apologize to the world for this soundbite-focused oversimplification. Indeed, antivirus is not dead but like other security technologies its role has changed. Like other IT categories, client security depends upon a layered "defense in depth" model. There is still plenty of pedestrian malware out there that antivirus software is perfectly capable of addressing. Yes, there are other more ominous threats as well which is why desktop software vendors now provide intrusion prevention heuristics as part of their security suites. In other words, add another layer of protection to enhance security and protect against another type of threat. In its simplest form this description categorizes all security strategies.

Saying antivirus software is dead is like saying that airbags made seatbelts obsolete. In fact, airbags simply made seatbelts a part of an overall safety system and thus enhanced automotive safety.

Finally, can someone please introduce me to the analyst who proclaimed that "mainframes are dead" back in 1990 or so? Even after all of these years, I doubt that anyone would own up to such a ridiculous and wildly inaccurate assertion.

[mjm01010101]

AV is dead

Put a properly locked down system on a network, be it modern ubuntu, PSX, or windows where users run as users and can't be elevated, and your AV/spyware concerns will vanish. They can't modify their own environment in a manner that can harm themselves.

[fumelo]

Only 1 problem:

Sloppy software programmers that design their software requiring the user to have Local Admin rights. As an IT Admin, this frustrates me the most as we cannot lock our machines down properly because some software will not work. This causes us the most problems, not just with malware, but with unauthorized installs and such.

Old story, long battle.

[rbeier]

I agree

It's really not that simple as locking everyone down. I wish it was. But with our companies needs most of our users run as admins. So I just have to stick with the layered protection of Firewall, spam filter, and AV software.

[Riquez-001]

uber-virus

Towards the end of 2007 AV software began to become
obsolete, unable to cope with the overwelming mass of virus's,
rootkits and malware. On 14th December 2007 the now famous
"Zroom" uber-virus was released into the wild & within 24 hours
93% of the worlds Windows PC's were taken down. Banks failed,
stockmarkets crashed, power stations went silent, planes fell
from the skys.

Only a small rag-tag band of Unix, Linux & Mac users remained.
The worlds power suddenly transfered to them overnight.
They ruled with an Iron fist. It was only right however - they had
been warning of this for years. Now, truly, the meek had
inherited the Earth.

[vr5ken]

Uber-Virus

Nice going knucklehead now you'll be watched (Homeland Security) as a terrorist for predicting events that may or may not come to past. Just keep dreaming about Linux! Just don't get too angry!!

[prtn802]

not dead, but antiquated

AV vendors are dead? 11 consecutive quarters of profitability & several billion in revenue might suggest otherwise.

While the a/v vendors are finding ways to grow,(primarily acquistion of best of breed niche solutions) the methodology behind A/V signature updating is a dying breed. Cutting edge vendors are deploying proactive solutions focusing on the "good" software, rather than constantly hunting for the bad. I've evaluated a few of the tools out there; vendors are starting to get it and so are their customers. I'd prefer to remain objective in my post but evaluations have lead me down a frustrating path. Instead of recommending a vendor, I suggest this whitepaper as a good resource:
http://www.bit9.com/files/wp-2006-Bit9-Anti-Virus-is-Dead.pdf

[drizs]

AV is not dead, just marginalized

Antivirus companies are clearly getting ready for the second coming. They starting to understand that if nothing is done very soon, they are going to loose the battle to freeware and open-source soon.

Same tendency is in the Office world, whereby, in my view, two to three years from now, Google Apps will become the alternative to MS Office. When Google Apps will move in to the comporate world, it's game over.

DM
http://maximumtrust.blogspot.com

[antivirus-software]

I still rank pctools spyware doctor as the number 1 antivirus software around
forums.about.com/n/pfx/forum.aspx?nav=messages&webtag=ab-antivirus&tid=2741

[erikehresman]

I find that most antivirus needs can be filled with many of the free antivirus softwares offered. There is clearly a need to block and remove some of the modern threats that slow down and cause problems in home users computers. But spyware is just as big a problem for home users. Once again there are many free softwares that are very effective in solving this problem for home users.
http://www.brainstormpc.com

[traged]

I dont belive big companies will trust free antiviruses, they will always buy paid solutions - just to be sure. Even free solution provides almost the same security nowadays.

Tonda
<a href="http://best-free-antivirus.oxyhost.com">http://best-free-antivirus.oxyhost.com</a>

[traged]

I dont belive big companies will trust free antiviruses, they will always buy paid solutions - just to be sure. Even free solution provides almost the same security nowadays.

Tonda
<a class="jive-link-external" href="http://best-free-antivirus.oxyhost.com" target="_newWindow">http://best-free-antivirus.oxyhost.com</a>