Desktop Security Software Risks - Part 2

>them. While many packages offer
This is the third in a series of articles highlightingbackward-compatibility the opposite is not true:
reasons why we need a new model for anti-virusforward-compatibility. There are several reasons
and security solutions.for this: a package written for Windows 98 will
Reason #2: the Desktop Security Software Risksnot anticipate all the changes to the operating
The risks of placing software on the desktop aresystem that are implemented for Windows XP.
such that I will be breaking this article into twoWhile your Win98 anti-virus program may work
parts.under XP, it won’t work at its peak
There are many advantages to putting securityperformance. It can’t. It’s just
and anti-virus software on the desktop. Theyanother reason for centralizing your security. By
range from efficiency to money. Under previoussiphoning all your traffic through a security screen
ways of thinking if I can capture security andat your ISP, for instance, you offload the need
virus problems at the desktop I can preventfor updates and staying up-to-date on your
them from going any farther. That works well insecurity software. This then becomes the job of
a non-connected environment. In the connectedthe service provider.
environment it makes more sense to centralizeUpdates
the software and monitor connections in and out.Having the software on your desktop means you
Basically “firewall” all the appliances fromare responsible for maintaining that software. In
each other.the case of office productivity software or image
In a previous article we discussed the securityediting software, if new versions come out with
risks inherent with desktop software designed tofeatures you’re not interested in, you
be the protection layer between you and all thosedon’t update. With new viruses appearing
bad people out there on the Internet. Here nowon the landscape every day, you can’t
we will discuss some more mundane issuesafford not to continually update your software. If
regarding the risks of putting security softwareyou don’t update for a month or two, you
on the desktop:run severe risks of infection. You also will incur
Dragpotential long update cycles as your software has
Drag steals clock-cycles from your processes soto be upgraded to handle all the new threats.
that it can run in a higher priority mode. Anti-virusThis makes the desktop these days a somewhat
software especially places a drag on yourineffective solution. Nearly two-thirds of all the
computer. Depending on your settings (and thePCs that have anti-virus protection installed do not
default settings are usually very aggressive),update their definitions regularly. These PCs might
every time you run a program or open a file,as well uninstall the software for all the good
real-time file scanning takes place and your filesit’s doing them.
are scanned for viruses. This slows down yourLost Time
processing. Accessing larger files takes longer. YouAs mentioned in the above discussion, you can
can see a discernible lag time between when youlose considerable time if you don’t update
start a program/open a file and when you canregularly. Long intervals between updates can
actually access it.translate into long update cycles. If you have a
Compatibilityslow connection to a vendor, your down time is
After the obvious issue of “drag” ismuch longer as you have to wait for the files to
compatibility. Often security and anti-virus rulesbe downloaded and then you have to wait for
get in the way of your doing business on youryour software to update itself.
computer. While you may get away with usingSolution
older versions of such packages as Word, Sims,The better solution is to move to a centralized
Photoshop, etc. on your computer with the newsolution in which all the software, all the updates
XP operating system, it’s unlikely yourare the responsibility of the service provider. You
security software will be completely compatible.pay for the service of having your email cleaned
Why? Many packages rely on very low-levelbefore you receive it. When email arrives at your
functionality to be able to do the tasks they setservice provider’s mailbox, it is checked
out to do. Anti-virus packages have to be able tofor malicious tendencies and stripped if bad. You
operate at a level closer to the hardware thannotice no long waiting, no downtime, no drag, no
most packages. They need to do this to preventincompatibilities.
virus software from taking precedence from