Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

03 July 2013

Anti-Malware

Anti-Malware, yeah it sucks, yeah it is easily evaded, yeah it is needed.

Say what you want about anti-malware but it is a component of defense in depth, and it does help the average user.  The question is less about should you run anti-malware and more about which one.

I'm going to high light 3 applications however there are many more out there.

Microsoft Security Essentials
Microsoft actually surprised me with Security Essentials when it was released.  It does not have the most options but at the same time that is not all bad for the average user.  I have been running Security Essentials for about 3 years and it has served me well.   I am also a wee bit paranoid about what I download and use several browser plugins.  Security Essentials is pretty much on or off.

  • It does not appear to use too much for resources.  
  • It also has a setting for max allowed CPU utilization.   
  • It has the usual custom and scheduled scan options.
  • It has the option to right-click and scan an individual file.
  • It ties in nicely with the Windows Security Center / Action Center.



Sourcefire Immunet
Admittedly I have not used Immunet for a substantial and dedicated period of time.  However I do like the company and it is based on the open-source ClamAV.  While Immunet is specific to Windows, ClamAV can run on most any OS.  For those folks that run multiple OSes this might give you more of a common feel across your devices.  Immunet is also fairly simplistic in the options available, though I would say it is a bit more flexible than Security Essentials.  Instead of a single on/off switch, Immunet has an on/off for various sub-components of its features.


AVG
AVG used to be the king of free anti-malware.  While I liked AVG it was a bit noisy and became annoying with all the various pop-ups.  AVG does offer the the most flexibility and configuration options.  It is typically favored by the more experienced users.

Just a small sampling of options.  Find one that you like and make it work for you.


02 July 2013

Secunia PSI

Secunia PSI

So the question is do I lead or follow with Secunia PSI?
As this is partially a ramp-up to DefCon ending on a security note would be appropriate.  However security is important and should not be left to wait, so grab this puppy and run it.

Personally I prefer the 2.x interface more than the 3.x interface.  With that said the interface in 3.0 has been tweaked since it's initial release mostly compensating for the aspects I did not like.  The addition of the list view is very welcomed.  As was the option to select between auto-update and notification only.

In theory the 2.x version is completely usable and will keep you just as updated as 3.x.  I have not attempted to run 2.x on Windows 8, mileage may vary.

Download and install is the typical double-click process, no surprises there.  Last I ran the installer the application was still pleasantly unbundled and did not contain any extra garbage, tool-bars, etc.

So why should you care and run Secunia PSI?
You are running Windows right? Enough said.  No seriously while Microsoft is making strides towards better security it is still a huge target.  As are many of the big name applications that run on Windows.

Secunia PSI will not secure or protect the OS or the applications themselves.  It will however alert you to the presence of a known vulnerable version of software and provide a link to the patch if one is available.  There is an option to allow Secunia PSI to automatically download and install patches.  Point being there is a distinction between having an up-to-date version of software and securely configuring said software.  Secunia PSI does not examine the specific configuration of the software, only that it is up-to-date.  For most of you average Windows users this is huge and Secunia PSI is incredibly valuable.  Even for seasoned users the task of ensuring your patch process each month is greatly simplified.

Secunia PSI will make you aware of exactly how much stuff is on your PC, and what most be updated.  Listen to it well.  Use it to eradicate the unnecessary bloat ware shipped with your new PC.  Use it to keep the high target apps up-to-date in near real time, Java, Adobe Flash, to name a few.

Every Windows user should take advantage of this wonderful and free app.

Secunia PSI