Share

Related Links

Top 5 Stories

News

Hackers are winning the cat-and-mouse game against anti-virus programmers

12 August 2010

Ever since malware writers swapped worldwide infamy for hefty profits, they have become a larger problem to deal with. And, says Ron Clarkson, senior vice president of CoreTrace, as the game of cat-and-mouse with anti-virus software programmers continues, hackers remain one step ahead of their chief nemesis.

Clarkson, whose company is behind the Bouncer security whitelisting system – recently updated to version 6.0 – says that, not only has malware become stealthier in recent times, it has multiplied in variety and volume at an unmanageable rate.

"According to Sean-Paul Correll, a threat researcher at Panda Security, in 2006 the growth in malware samples was doubling year-after-year. By 2009, that number jumped to 25 million new strains, more than the previous 20 years combined", he said.

Writing in his security blog, Clarkson, who was previously with Trend Micro and NetIQ, says that through to July of this year, this number grew to 46.6 million malware samples – almost 100% growth over the last year, with five months remaining.

And although anti-virus security companies have responded with new technologies to detect more sophisticated attacks, he says that security experts such as Golden Richard III – a professor of computer science at the University of New Orleans – notes that anti-virus software programmers are losing the battle.

"The viruses are winning because the defenses don't work very well. It's much harder to be on defense. And the offensive guys are really smart, they've got a lot of resources. It' a bleak situation", he said.

Clarkson went on to cite Danny Quist, a malware specialist with Offensive Computing, as saying that modern malware uses many different ways to conceal itself from the most advanced anti-virus software, which only detects 40–70% of infections.

"The most recent example is the latest incarnation of the Stuxnet worm, which uses techniques to evade anti-virus detection and install itself on Windows systems to access SCADA environments", he said.

This article is featured in:
Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.