Windows Vista
Symantec's study found that Windows Vista bocks up to 98 per cent of malware

Symantec clears Vista on malware

Not a secure system, just more sturdy than previous Windows versions

Written by Matt Chapman

Microsoft's Windows Vista is more secure than previous versions of the operating system, according to security experts. 

Symantec's latest set of white papers found that rootkit malware will not install in Vista without users being notified, and that all kernel-level rootkits are blocked unless users ignore multiple pop-ups and click the 'Allow' button.

Graham Cluley, senior technology consultant at Sophos, said that the User Account Control in Vista is an important enhancement designed to prevent the installation of malware.

"However, it is also very intrusive with a high number of alerts that end users need to respond to, so there is a strong likelihood of it being disabled unless they are trained in how to use it," he added.

"This is one of the weaknesses that malware authors will undoubtedly attempt to exploit."

Symantec's study found that between 96 and 98 per cent of malware such as spyware and Trojans is also blocked.

However, the firm warned that malware writers could decrease those percentages by making only minor changes to their code.

Cluley agreed that Vista is the most secure operating system yet from Microsoft, but pointed out that it will still be targeted.

"Better security does not mean perfect security. The only 100 per cent secure computer is probably one without an internet connection, and with the keyboard and all disk drives disconnected," he said.

"There is malware that can successfully run on Windows Vista, so early adopters of the new operating system should still worry about worms, Trojans, spyware and the like."

Symantec's report also noted that the kernel protection is only offered in the 64-bit version of Vista, and that the 32-bit version is still open to attack.

Symantec praised features in the operating system that allowed developers to make their code harder to exploit.

But it also warned that this protection is only available if developers include it, and is missing from older Windows XP software and even some core components of Vista.

Symantec originally mauled Vista back in August 2006, pointing to security flaws that would allow computers to be easily overtaken by malicious parties.

"During this research we discovered a number of implementation flaws that continued to allow a full machine compromise to occur," the 2006 report said.

"By exploiting these flaws, a low-privilege, low-integrity level process can bypass User Account Protection, and ultimately execute code at a high-privilege, high-integrity level."

However, those tests were carried out on early release code and Symantec said that security would continue to be addressed until the final release, with some of the holes already plugged by Vista Beta 2.

Cluley concluded that the battle would continue between virus and malware writers and the team behind Windows Vista.

"There will continue to be flaws found in Windows Vista, and users will need to ensure that they are putting appropriate measures in place to defend themselves," he said.

Tags:

reader comments

related articles

Windows Vista

Hacker highlights gaping Vista security hole

Microsoft tries to play it down 16 Feb 2007

 

Windows Vista security under fire

Kaspersky questions platform's ability to fight off malware 30 Jan 2007

Experts claim Vista security not fit for purpose

Ineffective blocking capabilities in Windows Defender, slow definition updates and weak antivirus 29 Jan 2007

Trend Micro preps Vista security suite

Internet Security 2007 for Vista to ship on 30 January 18 Jan 2007

Windows Vista arrives with minimal security

McAfee only major security vendor to have security suite ready at Vista business launch 01 Dec 2006

Security experts warn of Vista-specific malware

Three Vista-affecting pieces of malware make it into the November virus charts 30 Nov 2006

Symantec Vista security advances despite Patchguard

Public beta released of Vista consumer security software 28 Nov 2006

Teenager admits to million-PC botnet scam

18 year-old unlikely to get jail senence 01 Apr 2008

Man admits to unleashing anime Trojan

24 year-old the first virus writer to be arrested in Japan 19 Mar 2008

Halloween 'skeleton' spam hides Storm Trojan

Don't let your PC be turned into a zombie 31 Oct 2007

related whitepapers

today's top stories

Body Shop rolls out PCI system

Retailer hopes to benefit from improved customer data analysis 07 Oct 2008

Where to offshore (and why not here?)

Tholons, the research firm founded by well-known offshoring guru Avinash Vashistha , has just published some new research in Global Services magazine... 07 Oct 2008

The future of Ethernet

Where is Ethernet going? We look at the future of the widely-used networking technology. 07 Oct 2008

The pIT stop Q&A: How can I measure the business success of IT applications?

Ou expert panel answers readers' real-life IT questions 07 Oct 2008

National Identity Fraud Prevention Week

Every Monday seems to mark the beginning of a new awareness drive and this week’s theme has particular importance to small businesses... 06 Oct 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Would you apply for a job that was advertised on Facebook or a similar social networking site?

Would you apply for a job that was advertised on Facebook or a similar social networking site?

The government is using Facebook to recruit IT staff - would you apply to such an ad?

Previous poll results

Latest audio and video articles

Ethernet cableVideo

The future of Ethernet

Where is Ethernet going? We look at the future of the widely-used networking technology. 07 Oct 2008

Podcast imageAudio

Computing podcast - Next-generation broadband Britain; and we report from Gartner's IT security summit

In our latest podcast, we discuss the hurdles that a national fibre-optic network must overcome, and look at the issues discussed at the recent IT security conference 02 Oct 2008

Latest in-depth articles

Features

How to ensure progress in programming

Best practice advice from Forrester Research 02 Oct 2008

BT workersAnalysis

Wanted: a viable model for fibre

While other European countries are pressing ahead with fibre rollouts, progress in the UK is being held back as the debate over who will foot the bill drags on, writes Dave Bailey 02 Oct 2008

Advertisement

Primary Navigation