Where, oh Where, are Perfect Security Features?

re: Where, oh Where, are Perfect Security Features?

Alun Jones — Mon, 11 Sep 2006 21:37:28 GMT

"Silver bullets are for werewolves - vampires need wooden steaks" :-)
Note that even when you come up with a really good security feature, say Patchguard, someone else, say an antivirus vendor, cries foul because they want to be able to inject code into every device driver on your system, as well as the kernel.
As users and administrators, we're faced with the dilemma that many malware actions are actually also reasonable user actions.
"Delete this document" - 'No, you might be a virus'
"Update this field with a different number" - 'No, you might be a virus'
Pretty soon, you end up with OS and data carved in stone, never to change - not so useful.
Obviously, there's some measure to which you can spot malware that says "delete this document, but do it in such a way that the user doesn't figure out that you're doing it", and that's where much of the skill lies.

Real Life Protection! IE7 on Vista

Think Security - Jeff Jones Security Blog — Wed, 27 Sep 2006 21:05:07 GMT

Happy&nbsp;day, if you get this dialog&nbsp;box:&nbsp; This&nbsp;screenshot comes from Zdnet article&nbsp;Vista...

Real Life Protection! IE7 on Vista

Jeff Jones Security Blog — Tue, 07 Nov 2006 22:28:59 GMT

Happy day, if you get this dialog box: This screenshot comes from Zdnet article Vista passes one security

UAC, an Excellent Description and Discussion by Crispin Cowan

Jeff Jones Security Blog — Tue, 13 May 2008 01:08:03 GMT

I was excited when Dr. Crispin Cowan joined the company a while back - what security person wouldn't

UAC, an Excellent Description and Discussion by Crispin Cowan | IT & Network Security Blog

Sat, 12 Jul 2008 22:04:13 GMT

PingBack from http://ntoolz.net/blog/2008/07/12/windows-security/uac-an-excellent-description-and-discussion-by-crispin-cowan/

UAC, an Excellent Description and Discussion by Crispin Cowan | IT & Network Security Blog

Sun, 13 Jul 2008 11:05:08 GMT

PingBack from http://ntoolz.net/blog/2008/07/13/windows-security/uac-an-excellent-description-and-discussion-by-crispin-cowan/