Ads by TechWords

See your link here
Receive the latest technology news and information.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Personal firewalls: The 'other' antivirus software

March 18, 2004 12:00 PM ET

Computerworld - They come under different names -- SubSeven, NetBus, Deep Throat, Back Orifice or the recent Mydoom -- but they share a common trait: They open a back door to an infected system. You wouldn't leave the back door of your home or business open to intruders, and your computer merits the same prudence.
Most commercially available antivirus products will detect known worms and Trojan horses that open back doors, but malicious code evolves rapidly, and new, more sophisticated threats surface daily. Worms can spread very quickly, and antivirus vendors aren't always able to develop and disseminate updates in time to prevent a major outbreak.

Personal firewalls for antivirus software
Like their malicious-code nemeses, personal firewalls have evolved dramatically. Today's breeds go well beyond protecting against unauthorized intrusions from hackers and crackers. Current offerings actually complement your antivirus software by protecting against malicious attachments and alerting you if certain applications or operating system components have been modified.
Some, like Outpost by Agnitum Ltd., will even prevent users from visiting illegal or inappropriate Web sites. In the event that a fast-spreading worm with a backdoor component avoids detection by your antivirus software, you might still be able to detect it if you use a bidirectional firewall, since the bidirectional firewall will alert you when an unauthorized program attempts to connect to the Internet. The following is an example of how this would transpire:
Let's assume a Trojan horse arrives via e-mail. If you're using a personal firewall, such as Agnitum's Outpost Pro or Zone Lab Inc.'s Zone Alarm Pro, the suspicious attachment will be renamed so that you don't inadvertently open it. However, if that Trojan horse were to infiltrate the system, the personal firewall would warn the user about any connection or port that the Trojan horse attempts to open or use. The user would then provide an appropriate response.
In addition, many personal firewalls display all applications that attempt to access the network, allowing users to trace the local path to these applications. If that Trojan horse attempts to impersonate a trusted application by masquerading as one of its components or injecting malicious code into its working space, the personal firewall will alert the user. Nearly all the major players in the personal firewall arena offer this type of application protection.

Downstream liability protection
We live in a litigious society, and lawsuits are a lamentable fact of life. If your computer is compromised by a backdoor worm or Trojan horse and then used along with hundreds of others in a



Jump to comments

Security

Additional Resources

Microsoft
Here are some of the key reasons why you would want to run Unified Access Gateway with DirectAccess.
Microsoft
Review how one energy firm tightened protection and simplified IT work using business-ready security solutions.
Sybase
In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Death to PST Files
Download Now  

Web 2.0, Social Media and the Dark Web - A Web Criminals Paradise?
In this discussion, learn about the challenges of protecting your users from the potentially unsafe content hidden in the "Dark Web".

eGuide: Enterprise Security
Smart Security Strategies for 2010. Read now!  

Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...


IT Jobs