|
|
|
Microsoft Security Essentials: First Impressions |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Présentation : Hey folks, in case you were living in a cave, Microsoft's Security Essentials (formerly code-named "Morro") is now live and available for download. As it went live at 11:00am Central Time I couldn't help but snag it the minute it went live... and wanted to throw out my first impressions and continue to update this post as I put the free anti-malware client through its paces in my lab. Lab Configuration: * Host: Linux Ubuntu 9.04 running Sun VirtualBox * Host OS: Windows 7 RC build * Memory: 2Gb * Disk: 20Gb * This is the only anti-malware client on this [virtual] machine After jumping through the hoops to download the BETA, and actually reading the EULA and software agreement (which is pretty standard, by the way... no giving up your first-born), I got the client installed and working just fine. I grabbed the available version (6/21/09, Ver. 1.0.1407.00) and installed it immediately. First thing I noticed is how utterly tiny this client is, at just over 4.7Mb, that's astounding! Maybe this isn't everything that my monstrous Kaspersky install is on my laptop... but this is pretty impressive if it can deliver. On disk, after installation the Microsoft Security Essentials directory is just 8.67Mb, with 38 files in 6 folders... again, not too bad. As far as system resources are concerned, the msseces.exe process runs in the context of the currently logged-in user (as is expected with Windows 7 controls) using ~0% CPU and just 3.468Kb of memory. With such a small footprint one has to immediately wonder... is this thing even effective? I'm going to find out. One thing that those of you who are used to complex anti-malware packages will notice is the distinct lack of advanced features... this is, after all, a very simple anti-malware client. Simple being the operative word here... so you can't expect much for free... or can you? There is the option of Real-Time protection which enables itself after the first auto-update and there is an auto-update features, since the goal is to reach those who would never remember to do it manually. Overall first-impressions are... "yea, it's simple". Looking at the settings one thing did strike me though... the participation in Microsoft SpyNet (which is apparently a carry-over from the Windows Defender tool) has a Basic or Advanced membership. I can't quite tell exactly what the advanced membership buys you (the user) or why it shouldn't be the default... as it appears that it would help the SpyNet folks pin-point the malware more closely. One thing I did notice is that there is this interesting clause, which I can't imagine worrying anyone... "In some instances, personal information might unintentionally be sent to Microsoft. However, Microsoft will not use this information to identify you, or to contact you." That unintentional gives away something that I think needs to be further investigated. What types of information is being sent over? How can analyzing malware unintentionally lead to disclosure (or harvesting, accidental or not) of your personal information? I'd venture a guess that as malware collects information on YOU, it may inadvertently pass that information on when it's captured, but I can't say for sure. Here's how I'm laying out my tests for the coming week or so... * Using Security Essentials I'm going to find and download some "questionable content" from the dirty underbelly of the Internet... * I plan on comparing SecEssentials performance in detection and raw stopping power against that of my Kaspersky installation protecting another VM... * I'm also planning on comparing "Morro" or Security Essentials against some of the other things out there including PrevX (if they ever get back to me)... Look for more coming soon... so far, so good. Do you have the BETA installed? Have you given it a test-run and found anything interesting? Be the first to comment here... let's hear your reactions if you're willing to share![][] [] [][]
Les mots clés de la revue de presse pour cet article : microsoft security
Les videos sur SecuObs pour les mots clés : microsoft security
Les mots clés pour les articles publiés sur SecuObs : microsoft security
Les éléments de la revue Twitter pour les mots clé : microsoft security
Les derniers articles du site "Digital Soapbox Preaching Security to the Digital Masses" :
- How NOT To Do a Security Advisory
- Internet Surveillance... for your Credit/Debit Cards?
- RANT Forget SSNs
- Fun PDF Stuffing Feature... hack
- SecurityMetrics - Another Site Security Certification Seal
- RANT Call Me a Realist
- OWASP Podcast #27 - Security Skeletor
- What ever happened to...
- Microsoft Security Essentials: Road Test
- Microsoft Security Essentials: First Impressions
- Bring on the KY
- OWASP 2009 AppSecDC Thoughts
- The iPhone worm ... SRSLY
- Completely Missing the Point
- CSI Annual 2009
- Fox News Bring Your Toddler To Work Day
- Hell in a Handbasket ...
- The Jihad Job ... recruiting via email
- What privacy I use Google ...
- Infosec is Rotten
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, microsoft, réseau, attaque, outil, vulnérabilité, audit, système, virus, internet, données, présentation, metasploit, linux, bluetooth, protocol, vista, scanner, réseaux, shell, engineering, rootkit, paquet, conférence, trames, wishmaster, téléphone, source, sysun, noyau, mobile, https, mémoire, rapport, botnet, téléphones, libre, reverse, navigateur, patch, snort, scapy, intel |
| Mini-Tagwall de l'annuaire video : | | | | vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux, network, iphone, server, exploit, wimax, conficker, virtu, virtual, engineering, cisco, reverse, shmoocon, wireshark, ettercap, hacker, firewall, internet, knoppix, rootkit, arduino, wireless, source, conference, backtrack, openbsd, brucon, systm, overflow, openssh, access, buffer, remote |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
