Burton Group's Enterprise Antivirus Selection Criteria
Enterprise AV selection considerations, according to Burton Group analyst Dan Blum.
By Mary Brandel
August 05, 2009 — CSO — Enterprise AV selection considerations, according to Burton Group analyst Dan Blum:
- Price. Inquire about annual subscription costs and additional charges for antispyware, cleaning, host intrusion protection system capabilities, etc. Ask whether suite pricing is flexible if you don't require every module.
- Scanning engine. Are there multiple agents for antivirus, antispyware, application control, etc.? If so, do they cause management or performance inefficiencies?
- Behavior-blocking functionality. Does the system monitor system calls to prevent vulnerability exploitation attempts?
- System firewall. Does it provide blacklists and whitelists for addresses and domains?
- Application control (whitelisting). Does it provide up-to-date and customizable whitelists and blacklists? A learning engine?
- Cleaning/remediation. Does it provide virus, spyware and difficult rootkit cleaning?
- Client updates. How large and frequent are signature and other updates? This can range from one per day to multiple updates per day.
Read more about malware/cybercrime in CSOonline's Malware/Cybercrime section.
Other stories by Mary Brandel
Understanding malware techniques and the ever-more sophisticated cybercrime ecosystem
Advanced evasion techniques emerge
Organized cybercrime revealed
Inside the global hacker service economy
Anatomy of a DDoS extortion attack
The rise of anti-forensics
The botnet hunters
Timeline: a decade of malware
- Introduction to VMware vCenter Site Recovery Manager 5
- Introduction to Virtualization
- Preventing Unplanned Downtime with Server Virtualization
- Secure Cloud Infrastructure and Next-Generation Data Centers - An Interactive Panel for Decision Makers
- Gartner Next Generation Network IPS Webcast
- Understand Your Data: The Future of Backup and Archiving
- Patch Tuesday preview, February 2012
Microsoft published its Patch Tuesday Preview for February of 2012 a few minutes ago. IT admins can expect nine bulletins to address 21 security vulnerabilities.
It looks like four bulletins will be rated critical while the rest are designated as important.
Affected Microsoft products are:
- M86 report proves water is wet
- Actor, banker, soldier, spy: Suits and Spooks Anti-Conference aims to redefine security
More Salted Hash with Bill Brenner
