Login | Register


Solutions for Industrial Computing

The Solutions for Industrial Computing Blog is the place for conversation and discussion about industrial computers, systems and controllers; communications and connectivity; software and control; and power strategies. Here, you'll find everything from application ideas, to news and industry trends, to hot topics and cutting edge innovations. This blog is inspired by the Solutions for Industrial Computing newsletter from GlobalSpec, which you can subscribe to here.

Previous in Blog: What's the Real Story on Computing's Carbon Footprint?   Next in Blog: When Should You Upgrade Operating Systems and Other Software?
Close

Comments Format:






Close

Subscribe to Discussion:

CR4 allows you to "subscribe" to a discussion
so that you can be notified of new comments to
the discussion via email.

Close

Rating Vote:







4 comments

The Anti-Malware Dilemma

Posted February 07, 2008 8:18 AM

Unless you're an IT professional with all the latest knowledge of anti-malware and what programs you should implement, you've probably come to a crossroads security dilemma. Can I just use a firewall and an antivirus program that's updated periodically, or do I need more. The more includes separate anti-bot, spyware-remover, and other software. Some call that double-dipping by the software providers that be. What do you think?

The preceding article is a "sneak peek" from Solutions for Industrial Computing, a newsletter from GlobalSpec. To stay up-to-date and informed on industry trends, products, and technologies, subscribe to Solutions for Industrial Computing today.


Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.
Guru

Join Date: Oct 2007
Location: Zagreb, Republic of Croatia (native name Hrvatska), Europe (NOT EU yet)
Posts: 577
Good Answers: 7
#1

Re: The Anti-Malware Dilemma

02/16/2008 7:50 AM

Whole issue is quite artificiall and is just byblow from Microsoft laboratories games of crashing WINDOWS OS. Autostarting and autobooting are culprit, if only owner of computer can run programs allready installed, then there could be no computer viruses. Likevise, if program can use ONLY files with names hardcoded in it, or those it has created on user computer, and have to contact other such program of other user to verify that file sent from outside IS made exactly by same program of user that is sending it, or just check such file that it has no parts added that does not belong there, it would be impossible to get viruses in own computer, unless one is making such programs! Yes, I am quite sure that exactly companies that produce antivirus software are responsible for viruses directly or indirectly, as ONLY THEM are gaining from existence of such threats! It is classicall ecconomic move of creating market for their own products and having captive audience/customers that cannot afford to NOT buy their antivirus or antimalware programs! Same is with SPAM, child pornography and SCAM letters, as their dissemination could be easyly checked at OS level and suppresed at source! It is ALL responsibility of Microsoft and other OS vendors, and if victims of virus/malvare attacks would sue MS for damage, they would fast patch all security gaps, or build new OS that is not possible to hack from OUTSIDE of computer in question! But, first thing You have to agree to when You buy anything from Microsoft or other software vendor is that You use it at YOUR own risc as THEY are not responsible for bugs, omisions or use >>for any particular purpose<< which is to say it is not guaranteed for use in ANY case.:-(( Quite contrary, software wendors should GUARANTEE that their software work EXACTLY as it should and is explained in manuals, and customers ought to be protected by LAW againest software malfunctions! Then maybe would MS change their policy to gather geniuses around the world and let them do what they feel they like, expecting that they would rediscover programming instead of having them taught how to PLAN, write and TEST their programs! That is job of System Analysts and System Engineers like me, and surely one that has learned and used over 20 different programing languages, many in severall generations and on severall platforms would better know their strenghts and weakneses, and it take someone with VISION to make something new that would be also usefull...... Instead of producing more and more specialized programming languages, there should be ONLY ONE, with its evolution planned beforehand and coordinated from one centre, then everyone can learn it and if talented also participate in its development while everybody would benefit since one problem would be solved once as prototype solution for its class of problems and then every programmer would be able to use such OBJECT as it would become part of this programming language, while compiler would also controll its use, precluding wrong parameters, and everything would be ABSOLUTELY bug free and could be also optimized later if one have new idea that would enhance speed or precision of execution, without any affect to all programs that has such OBJECT/CLASS allready incorporated as their part......... If program would also dinamicaly load only OBJECT and its methods that it need for its work, then there would be no bloatware nor there would be need for recompilation of once made program, as it would allways choose latest and best version of OBJECT/Class used! I have plan for such language but unfortunately am fighting for survival in small and poor country, and it does not matter that I have IQ of 214 in logic thinking, as I am allmost 57 years old, so nobody would think I have perspective life in front of me :-((

Marijan Pollak, IT SE 1st. Class, Instructor and Team Leader (retired)

__________________
Per Aspera ad Astra
Power-User

Join Date: Mar 2008
Posts: 345
Good Answers: 1
#2
In reply to #1

Re: The Anti-Malware Dilemma

03/24/2008 11:25 AM

Rigth rigth, It's does very true. How come, that, is a software or programm state it going to do this and that then if end up something different there is no liability ? That's exactly the same thing I hate when approaching any of these programs which will be some how good but then in order to get hook we have to agree to all the microscopicals letters at the bottom part. It's not fair. We are paying them to get a product that simply should be doing it's purposes no catch no hide and see games. Pick a Buu games. Give me a Break. You got an strong well explained point and an strong case I bet.

The other day, I was trying getting install one of those PDF readers programs in order to be able to get the most for the information I was looking to work on. And guess what? Yes, same trouble all of the sudden my computer screen start acting out with some funny pop-ups and suspicious stuff that I just decide to shut-off rigth away the modem before some kind of trojan or parasite bug make inside and damage something on the cpu. Unbeliavable. So, I do need still the PDF reader operating but are very afraid the thing came with some viral stuff and I end up bringing my computer to the repair tech down the corner just because of that. You know what I mean, it will do cost me some dollars then, to get it back on line. Actually all this programs should better do saying, look, this is the DEAL, this program will cost you this or that amount from the beggining and that's that. And, forget the hide and see trickys stuffs, you know what I mean. So, instead of put the customers computers operating systems in jeopardize they will deliver on what their mouths said, the such and such programs will do honestly. No winsy winsy spiders. I do believe as yourself it should be some better straigthforward way to control such stuff from happening. Actually, if whoever attempt in sending viruses and stuff, I guess, that by detecting IP Location will easy the path to knock'em down and put it out of business. Again, it can be possible that they can camoflage and use a funny IP Address too. I don't sure if that can be possible for some one with the know how but there will be another challenge to determine who the heck is trying messing up the network. That will be like a use of false Plates Numbers in a car to camoflaging real IP Address. I guess... Who Know's Then ? I'm telling you, is just too much sometimes. Well, thanks for the heads up here and you have a nice one now.

Hanging in There...!

MC

Guru

Join Date: Oct 2007
Location: Zagreb, Republic of Croatia (native name Hrvatska), Europe (NOT EU yet)
Posts: 577
Good Answers: 7
#3
In reply to #2

Re: The Anti-Malware Dilemma

03/24/2008 8:33 PM

Thank You for support! If we would like to stop malvare from spreading, then instead of checking milions of computers, everything must be checked at source and dont alowed to spread in first place. I think software users should form some kind o association and when it would have enough members, then their opinion would also carry weight, not only with software companies but also with lawmakers, so perhaps selling of badly made software would be prohibited. Then and only then would great software companies like Microsoft start thinking about their clients upon whom they force such bad products that need dozens of patches to work.......... With only one milion US $, I could make perfect programing language, but unless I got Nobel prize, there is no chance that somebody would invest money in my company, and such programing language would make all other languages a history :-)) But when language is simple to learn and compiler do most of work for programmer, then benefits would be indeed great for whole world, as everybody would have to learn just ONE language, and then just quality of work done would be measure of talent, specially if every good and proved solution would be retained and used by everybody so same problem need not be solwed over and over......... Then, software wendors would be able to sell aplications that would also be working perfectly, but I am afraid that companies that make and sell dozens of compilers (like Microsoft) would not allow this, specially because they sell >>New<< OS-es that are just better patched old versions with some makeup changed.... Also, once OS is perfectly working, what would they sell? But they should know that even evolution of OS should be planned, if one dont want it to get out of hand, so with programmed evolution outward appearance would change but slightly and things added would be only necesary things, not what some genius of Microsoft think would be good idea or good experiment. Mr. Gates should know how much he has retarded progress of computer software evolution by making such numerous mistakes with OS-es, because any OS is just basic tool that make execution of aplications possible, that compilers are tools also, and both should be helping programer to make foolproof application, which in turn should help end user to do his data procesing and get intended result.

With all malware supressed, people would not fear for their data and can do their business in peace, no? But then, how would army test invulnerability of their ways of data protection? People are just like laboratory mouses, and perhaps they reason that if a small business lost its data, that cannot be compared to damage for the country that would happen if THEIR data would be damaged or lost or stolen. Equally, what is life of thousand mouses compared to one human? Since viruses could also be used to spy and steal data from adversary (whoever it would be at present time) or even from allied countries to check if they dont hide something, it is quite possible that armies from all countries are one source of so adequately named >>spyware<< and other malware. Also, it is perfect opportunity for companies that produce >>anti<< programs to create their own captive market, and they could even be sponsored by armies to creater malware which would test parts of their protection programs carefully inserted into common OS-es like WINDOWS. We should also remember that MICROSOFT owe their sucess to contract with army of USA for DOS. Perhaps it is not known to many nowadays, but at this time there was severall good and entirely proven OS-es working on computers with much less memory than first PC-s have had, I started working on FUJITSU'S FACOM 230-15 with 32Kby of RAM, which cleverly used virtuall, Magnetic Drum memory in size of 256 Kby, and if that were not sufficient, could use Magnetic Disc of nearly 3Mby same way, which slowed things down but still enabled machine to compile 18000 instruction program in COBOL, where one instruction were on one punched card, and also to execute resulting machine code. Same was with FACOM 230-45 which could use up to 512 Kby of RAM and execute 9 separate lines of processing or 127 independent programs in paralel. Compare this to 640 Kby of first PC's for which even Mr. Gates once stated that >>Nobody would ever need more RAM<<, and IBM System 360 series also started with meagre 64Kby of RAM, but their OS was tested and working nicely, too........... That said, it is obvious that first PC's were intentionally handicaped, and IBM has intentionally chosen inferior INTEL procesors over MOTOROLA's for same reason, as later has nice linear addresing and no problems with memory expansion in future, but what would happen to their Mainframes that were sold for milions of US $? Recent APPLE switch to inferior INTEL processors is also illogical, specially because all applications should be remade or at least recompiled, but users would be forced to buy new software if they want to upgrade their computers, and what is more important, their computers would become wulnerable to malware that previously let APPLE computer users in peace, because of differences in instruction sets and CPUs. Therefore, somebody want that NO computers would be imune to their viruses and spyware, and who else would use this to spy on eweryone but our governments? It could be done at first to try to catch terorists, but it could be used to check on common taxpyer to see if all taxes were reported and paid, software companies would use it to try to catch who copies their software ilegaly, or to spy on concurent software developement, business could find trade secrets of similar companies or seize business opportunities and so on..... But, as I explained earlier, it could be precluded by simple modification of OS, that should not alow program to be executed if it were not installed by user of computer in question, and program should not be possible to install if user name did not match name of owner of computer, which data should be strongly encrypted and saved in copy of instalation CD, DVD or other media. Then, user would also be able to make backup copies of his HD or instalation media as much and as offten as necesary, and nobody else would be able to use so encrypted software on computer not belonging to same person. That would also give user right to install paid software on all his computers, be it on work, at home or on laptop. Only catch would be that user data would have to be >>burned in<< in store where media with instalation would be purchased, for which some empty space could be provided, and for additionall security a seriall number of software copy could be incorporated as well, or better still, bot seriall number and buyer data should be combined and all used to form encription code, where seriall number would be dispensed from software company and user data is known to user allready, so such data would not be recorded anywhere, and as adition, user password could be aded to strenghten all. This method would require that instalation software would be encrypted and written in store on originall media from software vendor. Since same procedure would be used for OS, which would be compared at instalation time, nobody could install illegal copy, and no permision from vendor to reinstall OS or application would be necesary in case that software start falling apart like it happen offtenly with MS Windows Os-es. User would be able to reinstall paid software on new machine once it would be necesary to upgrade hardware or retire current computer entirely. Then it would be also possible to have same OS copy on severall HD's if one want to protect computer from malware that can come from WEB in email or some freeware program that is actually a trojan horse, by using HD drawers to isolate computer from possible harm to data or applications, like I did before MS enforced authorization of paid OS.......

__________________
Per Aspera ad Astra
Power-User

Join Date: Mar 2008
Posts: 345
Good Answers: 1
#4
In reply to #3

Re: The Anti-Malware Dilemma

03/25/2008 3:05 PM

This is a huge business definetly. A powerhouse in other words, awesome. Very well explained and good to know about it. I did'nt knew or heared about this facts before and it is a lot to get it at once but so far basically briefly technically I do understanding a lot more after read your information which I founded very interesting since I do not heared much about it no where else so far. Thanks for the heads ups again. So some how one of the great advantages of having a simplified language will be a huge leverage at global level to increase and speed up knowledge at all fields in the same time progressing for the better. As I read the technology is available to make it happen but the support and backup lag due many differents issues or interest if I got it rigth. Kind of business plan issues. Some how everything is about money too I bet. So if I understood rigth the OS can be make work much better by adding the whole receipt into it. Awesome. So some how bigger business interest also are handling some how the malawares spectrum to some level. Any way we look at is not too fair if that can affect the little entrepenuers because then that will be like a no win situation at some point down the road. It will be much better if the technology be use it to detect bad stuff discretly but without affecting the good ones in their way to make it happen. I do believe you do have some good ideas there that by the use of an encrypted software designed for their owners specifications and computer owner any wrong application of such will better ID who or from where 'Virus or Malaware Spy Stuff' are coming from and individually catch them on the spot without harm more than neccessaraly. No needs to be expensive either. Having that in place will promote small business entrepenuers to speed up economy conditions feeling insured theirs business matters wouldn't be jeopardize or seize by some bigger careless interest. Like I mentioned before I dont know much about such technically stuff but do like to understand some how why some things are so difficult some times to get it done against the logics. It does make good sense what you explained and thanks for the good background. Like we hear sometimes " It have to be a better way to do it " Alrigth you all have a nice day now then. Way to go....

Allset...

MC

4 comments
Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.

Previous in Blog: What's the Real Story on Computing's Carbon Footprint?   Next in Blog: When Should You Upgrade Operating Systems and Other Software?
You might be interested in: Network Security Platforms, Network Firewalls, Trade Shows, Conferences and Exhibitions