Posted by: admin
on Mar 13, 2010
With people lacking the necessary knowledge on computer security, the U.S. government is now trying to find a way to address this ubiquitous problem. This dilemma has so perplexed the government that it has created a competition to find someone able to design an effective means for people to acquire sufficient computer security education.
Infected computers
The problem has been in existence for quite some time. Case in point: In Spain and Virginia, a legal battle has been ensuing against Mariposa botnet and the Waledac botnet. These two botnets are just a fraction of the ten largest botnets which control hijacked computers, often numbering in the millions. With such a huge number of infected computers, the statistics have become more alarming. What is even more alarming is the fact that even computers in corporations and banks, along with personal machines, are placed in jeopardy as well.
There is more to computer security education than simply helping computer users recognize that malware infections can come in the form of spam email messages or those messages that have funny subject lines. Software patching is of significant importance as well, and should not be disregarded outright.
The trouble with software patching
Although patching may seem like a good solution, the average computer user may find it too perplexing to begin with. Not only is software patching confusing, it demands a lot of time too, particularly with the frequency involved in the process. As a result, users are still divided as to their ability and willingness to invest in software patching. This has been the conclusion of the research paper authored by Stefan Frei and Thomas Kristensen at Secunia, released at the recent RSA Conference.
Included in the research paper was this statistic: Half of the users surveyed are actually using software from 22 various vendors, all of which are actually distressed by 75 security advisories released by Secunia annually.
The paper moreover states that an average computer user will need to administer the software host for a whopping total of 75 times a year, which means the user will need to handle an approximate number of 22 various update tools as a way to keep a system in a secure state.
The solution in sight
It is clear that a single automatic updating system is necessary. Nonetheless, automated updating has its own share of troubles as well, especially since it does not need real-time consent, and relies only on past notice and consent. When done by a reliable party, this often does not lead to any serious problem but there is always the risk of abuse.
According to Kristensen however, Secunia is bent on releasing a software that will alter the way that Microsoft Window systems are being updated. Secunia is planning to release a preview of their Automatic Updating System, marketed specifically to private computer users.