
This is something I have discussed with a few colleagues awhile back, but I thought this would be a good time to bring it up. Everyone has heard about the massive computer virus breakouts of 2003 and 2004. Well, 2005 kept pace with 2004, but we didn’t see much growth in infected email. So why have we not been able to prevent the outbreaks? Well the problem is with the system of deploying definitions.Think about it this way. Once a virus is created, if done well, it would be deployed and start to spread exponentially. Symantec and antivirus companies then take 30minutes to and recognize the virus. Well instantly, the virus has a 30min+ head start, and thousands, if not millions, are infected before the definition is made. Next, every computer needs to download the new virus definition. This is where the process breaks. Your computer needs to get a new definition before the virus hits it. No matter what happens, you are going to strain the networks. Well, most software vendors try to minimize the number of times the software checks. For example, Symantec releases weekly definitions using their standard setup. You can customize it to update every 60 minutes, but I would guess that a vast majority don’t do this.
I would like to propose an idea. Create universal definitions that can reside on firewalls & gateways so that they can be deployed to local machines without straining the global internet. This would help push definitions to clients, but I think the next step would be to give definitions away for free. Remember, everyone who isn’t running antivirus software is opening your entire network to evil eyes and fingers. So please keep your OS, software, and security software up-to-date.
What to look for in 2006? The hype is around instant messaging. We saw some hits of it in the 2nd half of 05, and it will continue to be affected until corporate IT staff can control the networks. We used to be able to control them by blocking ports, but now they all run over normal web ports (TCP 80&443) and the virus is being deployed as a url and not an attachment. I would look for open wifi, mobile spam, and blog spam to take a hit this year too. All three have been in early stages without standards for the last couple of years, and this could be the year that they have one major outbreak.