Re: No AV? Shock, horror!

[Rich Kulawiec <rsk () gsp org>]

On Tue, Sep 29, 2009 at 09:37:36AM +1300, Nick FitzGerald wrote:
> Given recent trends in malware development, the infection rate of AV-
> running systems will be far from zero.

Strongly agreed.  As I've pointed out elsewhere, all signature-based
methods (whether anti-virus, anti-spam, anti-intrusion, or otherwise)
are guaranteed to fail: it's only a question of when and what the
consequences will be.  This is not to say that they have zero value:
they clearly have *some* value.  But it is to say that sufficiently-clever
adversaries can engineer around them, and are doing so.

---Rsk
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.