Talking malware with Eugene Kaspersky

[Humpty]

I've got sandboxing and vitualization apps but no black/whitelists.May look at adding a whitelist app someday?

 

Images, clones and a few spare pc's as well.

Amidst growing chatter that the anti-virus/anti-spyware market is gasping for air, a veteran virus fighter says desktop security products must add new protection mechanisms to keep pace with aggressive online criminals.

 

Eugene Kaspersky, founder/CEO of 10-year-old Kaspersky Lab, says next-generation anti-malware products will have to combine whitelist/blacklist approaches with HIPS (host intrusion prevention system), sandboxing and virtualization to provide what he calls “hybrid protection” for desktops.

 

“The perimeter is slowly disappearing,” Kaspersky said during a presentation to a group of international journalists here. “It’s getting more and more difficult for reactive [security] technologies to handle the current threats. The world is getting more and more mobile with notebooks, smart phones and Wi-Fi everywhere. We have to develop special products to deal with this new world,” he added.

 

The new protection approaches — already being built into in security suites from Kaspersky Lab, Microsoft (with OneCare) and Symantec (with Norton 360) — will maintain the signature-based blacklist/whitelist capabilities and the behavior-based heuristic analyzers but, in future versions, Kaspersky sees HIPS and sandboxing playing major roles in keeping untrusted software at bay.

 

To fight back effectively, Kaspersky said the new wave of all-in-one solutions must replace the existing approach to fighting viruses.

ZDnet Article

[Caldor]

My only gripe is the performance cost of the heuristic engines especially KasperSkys. Black\whitelists are far less demanding.