Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Time to wise up about worms

Bottom Line By Joel Snyder , Network World , 02/16/2004
Snyder

I'm tired of having an in-box filled with worms. In the last 26 days, infected PCs have sent me 3,787 copies of MyDoom. I know I'm supposed to be an understanding, gentle kind of advice giver, but frankly, I'm sick of it. I'm sick of having my time wasted, and I'm sick of having to help people clean up messes because they can't control their own mice.

Why can't people take responsibility for protecting their own PCs? People never say, "I did something utterly moronic today and infected my own PC and 600 others." No, it's "I got a virus." As if it's not their fault. As if they caught a cold because they just happened to be in the room when someone who was sick walked by.

Well, it is their fault. You don't get MyDoom if you don't click on it. It's not even that clever of a hack, the kind where just staring at it funny infects your PC. It's not novel, either. When the ILoveYou worm came out, that was new. People got duped because they had never seen anything like it. But that was four years ago.

If you got MyDoom last month, you've got a problem, and it's not a software problem. It's a human problem. Here are some ideas for solving it:

Stop relying on virus scanners. When a worm like this breaks out, it can take hours for virus signatures to be updated and days for all the PCs in the world to know about it. A virus scanner is a great thing to have, but you can't blindly stumble through life clicking on anything you see just because you gave Symantec $20. If you have a heuristic virus scanner - they do exist - that can help, but it's still not a sure thing; it just increases the odds of success. You have to realize that even with protection, you're not totally protected.

Start relying on education. You, and all the users you support, should know better than to click on attachments, no matter who they're from, which launch programs or unzip themselves and self-execute. This is as basic as knowing your own e-mail address. When you put a company PC in someone's hands, they should be potty-trained to not mess all over your network. If you think training is expensive, consider the cost of not training.

Stop buying the monoculture. If everyone uses the same mail client and operating system, it's that much easier for malware to take down your network. I don't have any illusions that everyone in the world is suddenly going to stop using Windows, Office and Outlook, but I can tell you this: The only thing Macintosh users got from MyDoom was annoyed. There are Windows e-mail clients, such as Netscape and Eudora, that are less susceptible to the kind of prank that spreads MyDoom.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.