June 2, 2005 (Computerworld) --
Despite earlier fears, Microsoft Corp.'s looming shadow in the security market appears to have done little to slow McAfee Inc., one of the few major pure-play vendors in the market. The company last month reported a healthy first quarter, its consumer business is booming, and Wall Street analysts appear to be bullish on the company's prospects, at least for the short term. On the eve of McAfee's annual Analyst Day, company president Gene Hodges spoke about McAfee's enterprise strategy and its plans to bring new risk management and network access control products to market early next year. What is McAfee's strategy in the enterprise market, and what can customers expect to see by way of new products going forward? At the heart of our strategy has been a shift toward behavioral detection and intrusion prevention. Obviously, we are a company with a good pedigree in reacting to attacks with our antivirus software. But we saw several years ago that the threat profile and the speed of propagation would outstrip what most companies would be able to handle in terms of incident response times. So we shifted to an intrusion-prevention strategy. At this point, we have about a year and a half of solid data seeing these products deployed typically in larger enterprises. I can use McAfee as an example. We have stopped 96% of all the attacks on Microsoft and zero-day vulnerabilities this year. By the time an attack would appear, we had some anomaly detection capability or something else in our products that detected the problem -- even though it had not been seen before. For operational approaches, this means that reactive patching can almost stop. In our infrastructure, we have deployed just one patch so far this year in a reactive mode. It means the policy shifts much more towards risk management and intrusion-prevention policy planning and away from reactiveness. We obviously don't think that classic antivirus signature technology is [made] obsolete by intrusion-prevention technology. But we think we have a new and better way. So what role will signature-based tools play in future? Signature-based tools at this point sharpen the edge of the knife, so that the false positive rate is very low. One of the most important things we have done is to take a host intrusion-prevention product that we acquired last year and embedded some of the core capability from that product into our standard antivirus scan software. Using a combination of behavior and signature [technologies] allows you to put down a very broad intrusion-prevention footprint that with previous-generation products would have been fairly onerous to manage. What products will you offer in the risk management market? You
"Need help sorting through the hype of cloud computing? Here's some IDC research on the benefits, barriers -- and what..."
Read more...
"Stephen Spoonamore offers more details on what I was trying to drive home in my recent column: Because individual votes..."
Read more... Read more Security posts or See all Blogs
One positive development stemming from the collapse of Wall Street may be a boost in interest in computer science and IT careers among students who were previously interested in financial services jobs.
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center Register for this complimentary webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
Intercept Spam & Viruses
Download this whitepaper to learn how to outsmart spam & viruses, compliments of MessageLabs. (Source: MessageLabs) Register for a complimentary 30 day trial of MessageLabs' new managed Anti-virus and Anti-spam security solutions. MessageLabs guarantees complete protection against all known and unknown email threats. By providing 24 hour support, your business can increase productivity and decrease risk.Register now for a complimentary trial and receive a free datasheet. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Go Green with Webroot® Perimeter Security SaaS! Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance –all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! Download this white paper now!
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.
Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage.
See your link here
Subscribe to
Computerworld 
or
Other Security Stories
From Laggard to Leader: Transforming the Data Center
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Download this whitepaper to learn how to outsmart spam & viruses, compliments of MessageLabs.
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance –all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! 
Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.
John Brandon: Google Chrome = Dead, Google Search = Hot
Computerworld