csw08-alvarez

Recommendations

Info

Death of AV Defense in Depth ? > Problem Where is the Problem ? Recap : In General “The paradigm describes an approach where you assume that individual (even multiple) elements of your defense fall, in the worst possible way “ Where is the Problem ? Current AV DiD implementations define “the worst possible way” an Anti-virus product may fail as “Fails to detect a threat” or “Fails to detect a virus” whereas in reality the worst possible way is a more severe one: Compromise of the underlying OS through the Anti-Virus Engine. The result is that AV software itself is left with no protection at all, there is rarely any kind of mitigation. Side-Note : “Worst possible Failure” in general for Security Software (IPS, IDS, AV..) is defined as “fails to detect/react/alert”. Attacks on the Defenses themselves are rarely taken into account. This has led the industry to deploy AV DiD in a way that is detrimental to the concept > Multiple AV engines running on critical Servers with high privileged rights > AV Engines everywhere, high privileges, unprotected. > Mail gateways > Servers (WWW, DB, Fileserver..) > Clients > … [1] “Anti-Virus Defense in Depth” - Microsoft
Anti-Virus Software > Anti-Virus Software is everywhere So where is the problem ?
Page 1 and 2: The Death of AV Defense in Depth ?
Page 3 and 4: Revisiting AV Software ? What will
Page 5 and 6: Death of AV Defense in Depth ? > In
Page 7: Death of AV Defense in Depth ? > IT
Page 11 and 12: Anti-Virus Software > Myths Why bot
Page 13 and 14: Anti-Virus Software > Facts Here ar
Page 15 and 16: Anti-Virus Software > Facts Here ar
Page 17 and 18: Anti-Virus Software > General probl
Page 25 and 26: Death of Defense in Depth ? > TOC 1
Page 27 and 28: Anti-Virus Software > Hunting Bugs
Page 37 and 38: Anti-Virus Software > Facts The Res
Page 39 and 40: Anti-Virus Software > E-Mail AV Vul
Page 41 and 42: Anti-Virus Software > Email Exploit
Page 43 and 44: Anti-Virus Software > Final Words F
Page 45 and 46: Anti-Virus Software > Final Words F
Page 47: Anti-Virus Software > Final Words R

csw08-alvarez

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?