Someone from Cisco makes sense

formortals@thesophist.com — Thu, 22 May 2008 14:58:00 GMT

For a change, I think that someone from Cisco is making sense:
http://news.zdnet.com/2424-1009_22-202297.html?tag=nl.e622

He's sadly right. The only way I'd work with a blacklist anti-virus system is if it did not use signatures, but worked very similar to UAC on Vista or sudo on *Nix. In other words, certain behaviors were blacklisted. And even that is risky, because the bad guys are always finding new ways to abuse even relatively innocent system commands. Malware is a war that we're losing, and losing badly. The only answer are systems that are either thin clients (or effectively thin clients) that the IT department can lock down on the server side, or clients that are so limited in their usage that they can't do much other than the basics.

J.Ja

Justin James' Critical Thinking

Someone from Cisco makes sense