• On CHOW: Sexy vampire party
September 15, 2008 11:35 AM PDT

Security Bites 114: Desktop application risk

by Robert Vamosi

It may seem trivial to you what applications are on your desktop, but from a business or organization's perspective, it can be a serious matter. If an application provides unfiltered access to the outside world, this could create regulatory issues. Certain desktop applications can also indirectly or directly introduce malware inside the perimeter through file sharing. At the very least, some applications simply take away bandwidth (for example, streaming audio or video).

In its second report on Application Usage and Risk, Palo Alto Networks finds that 56 percent of the desktop applications surveyed use HTTP. Use of port 80, which the server uses to listen to requests from a Web client, makes it hard for organizations to filter or firewall the content.

Chris King, who appeared on Security Bites last April, talks this week with CNET News' Robert Vamosi about the report's findings, including the hidden risks in running Microsoft SharePoint or Lotus Notes.

To see all the risks associated with several hundred common desktop applications, Palo Alto Networks provides an online Applipedia.


Listen now: Download today's podcast

As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments.
Recent posts from Security Bites podcast
Security Bites 122: IBM sees security challenges ahead
Security Bites 121: What Microsoft's Geneva means for online IDs
Security Bites 120: When social networks host malware
Security Bites 119: Does the Internet need its own Interpol?
Security Bites 118: Voting in America
Security Bites 117: How 'Clickjacking' attacks hide behind the mouse
Security Bites 116: Investigating data breaches
Security Bites 115: Inside ID fraud's underground forums
Add a Comment (Log in or register)
by Lerianis September 15, 2008 12:55 PM PDT
Really, most desktop applications (except for an occasional update check) do not need to be connected to the internet.
Reply to this comment
by ZeusV99 September 24, 2008 3:38 PM PDT
I note that via the rss feed that you have begun enclosing the podcast in a flash container:

http://i.i.com.com/cnwk.1d/av/n/emff.swf?src=http://chkpt.zdnet.com/chkpt/news.pod.bites/http://podcast-files.cnet.com/podcast/cnet_securitybites_091508.mp3

versus

http://chkpt.zdnet.com/chkpt/news.pod.bites/http://podcast-files.cnet.com/podcast/cnet_securitybites_0905.mp3

I hope you realize that this breaks many podcatchers ability to pull the feed down correctly. I am currently using Creative's ZenCast organizer and the encapsulation has broken my ability to receive the podcast via RSS.

Thought you should know.
Reply to this comment
Subscribe to the Security Bites podcast

Subscribe to this podcast using an RSS reader other than iTunes

Subscribe to this podcast using iTunes

advertisement

FAQ: Buying the right Windows 7 upgrade

Readers still have lots of questions on just which version of the software they need to buy in order to upgrade their PC. CNET News tries to offer some answers.

N.Y. lawsuit details Intel's 'largesse' toward Dell

Attorney General Andrew Cuomo's federal antitrust case filed Wednesday alleges a longstanding symbiotic relationship between Intel and Dell.

About Security Bites podcast

Backdoors, pharming, botnets, phishing, rootkits, viruses, worms. Feeling vulnerable? Every Friday, CNET.com's Robert Vamosi will tell you about the latest security threats, what's coming, and how to protect your system.



View all Security Bites podcast episode blog entries

Add this feed to your online news reader

Security Bites podcast topics

Meet the host of Security Bites
Robert Vamosi Robert Vamosi has appeared on CNN, NBC, ABC, MSNBC, and various other media outlets as an expert on computer viruses, spyware, identity theft, phishing, and other criminal activities on the Internet.
advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right