Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Linux desktop growth could spur new malware activity

Experts say the platform, while generally secure now, could be vulnerable
 

Sign up to receive Security Resource Alerts

April 20, 2006 (Computerworld) -- When the Indiana Department of Education began installing PCs running Linux in schools last year, it installed open-source antivirus software on servers to scan incoming e-mail. But it didn’t bother installing antivirus software on the desktop computers.

“I hate to admit this, but I wasn’t worried,” said Forrest Gaston, a consultant managing the project for the state. Despite heavy student usage of the Internet, Gaston’s optimism has so far been borne out: “It hasn’t been an issue,” he says.

Besides Linux’s low cost, its relative immunity from viruses, spyware, worms and other malware has long been one of the open-source operating system’s key attractions to potential desktop users. Vendors who will be at next week’s Desktop Linux Summit in San Diego certainly tout it.

“There are almost no viruses for Linux. Certainly, I’ve never seen one,” said Tom Welch, chief technology officer at Linspire Inc., a San Diego desktop Linux vendor and co-sponsor of the show.

Jeffrey Jaffe, the chief technology officer at Novell Inc., another show co-sponsor, feels much the same way. In a recent blog entry, Jaffe wrote that since joining Novell late last year and switching to Linux, viruses have become “things of the past.” Novell is pushing its SUSE Linux for corporate desktop use.

Even vendors hawking Linux antivirus products acknowledge that the operating system does not suffer today. “Our product is more used to filter Windows viruses than actual Linux viruses,” said Ron O’Brien, an analyst at U.K.-based antivirus software maker, Sophos PLC.

But experts warn that could change if Linux begins to win a mass audience on the desktop, bringing in millions of users who are less proficient technically and less security-conscious than today’s typical Linux user.

“Windows was the only game in town, but now Linux is offering a more tempting prize,” said John F. Andrews, president of open-source market research firm Evans Data Corp. in Santa Cruz, Calif.

Earlier this month, Evans released survey data showing that 11% of developers reported seeing malware on their Linux systems, with more than a third of those having three or more infections. While still low compared with infection rates among Windows users, they are the highest totals ever reported in Evans’ survey, which has been conducted twice per year since 2002.

Earlier this month, a cross-platform virus emerged that could theoretically infect both Windows and Linux. The virus, called Virus.Linux.Bi.a/Virus.Win32.Bi.a, has not been used in any known attacks.

But experts such as Johannes Ulrich, chief technology officer at the SANS Institue, a Bethesda, Md.-based Internet security group, say such proof-of-concept code has traditionally presaged the launch of actual malware. “I think we’ll see an increase in virus activity as Linux becomes more mainstream,” Ulrich said.

Microsoft Corp.’s efforts to boost security in the upcoming Windows Vista, which will include built-in access controls similar to Linux, may also cause virus creators to look for greener fields elsewhere.

Continued...
1 | 2 | NEXT  



Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
"If you're controlling document transmission processes, don't overlook your multifunction printers, advises one vendor...." Read more...
"Is it just me or is Twitter suddenly experiencing a much, much heavier spam deluge than usual? And how evil..." Read more...
Read more Security posts or See all Blogs
DNS hole prompts synchronized patching effort by IT vendors
Microsoft plugs nine holes in Windows, DNS, SQL
Symantec warns of new Word attack
More top stories...
Microsoft sets XP SP3 automatic download for Thursday
Don't give Google a free pass on data collection, privacy advocates say after YouTube ruling
XP SP3 to reach most users 'shortly,' says Microsoft
All it takes is a couple hours and about $125 to breathe new life into an old laptop. Here's how.
Is Microsoft's Golden Age over? What are Gates' most memorable quotes? Find out in Computerworld's complete coverage of the end of the Bill Gates era at Microsoft.
There are some things your CIO definitely doesn't want to hear. Also don't miss the flipside, Five things you should always tell your boss.
With its latest version, Mozilla's browser continues to raise the bar for what Web browsers should be.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Business Continuity Zone
Data Center Management Zone
Enterprise-Class Security Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
Business Intelligence and Analytics Zone

Ads by TechWords

See your link here
Why SaaS is Vital to Email and Web Security
Why SaaS is Vital to Email and Web Security
Download this webcast, free, compilments of Webroot Software
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Eliminate SPAM, Gain Productivity
Get this white paper now!
(Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Virtualization Analysis for VMware
A Guide to Understanding Messaging Archiving
Archiving Compliance with Sunbelt Exchange Archiver
View more whitepapers