Home > Information Security Magazine > Features > Color Me Complex
EMAIL THIS LICENSING & REPRINTS
Information Security Magazine

  CURRENT ISSUE  

  FEATURES  

  COLUMNS  

  HOT PICK & PRODUCT REVIEWS  

  ARCHIVES  

  SUBSCRIBE/RENEW  
 

Color Me Complex
by Ed Skoudis & Matt Carpenter
Issue: Nov 2007
printer-friendly
licensing & reprints
< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   7  |   8  |   9  |   10  |   11  |   12  |   13  |   14  |   15  |   NEXT PAGE  >

IBM ISS was rated lowest in this series of tests, crashing several times and scoring so poorly as to cause us to double-check that protection was enabled. IBM ISS leaves signature- based antivirus turned off by default, another indication that this product is typically used to augment another vendor's antivirus solution. IBM ISS has licensed BitDefender's antivirus and antispyware functionality in its endpoint suite, which we activated before starting our test regimen. The initial real-time test completed without the tool blocking a single file. According to IBM ISS support personnel, file copies across Windows network shares are not scanned, even with the on-write scanning option enabled. This stance mystifies us, considering that users could copy infected files on a file server back to their clients without any real-time protection.

The on-demand scanning was hardly better. The follow-up on-demand scan started off as expected, but halfway through the scan (according to the progress bar) scanning stopped and we were greeted with the message "Successfully Completed." However, the same GUI listed "Number of Files Remaining: 4,430" and we still counted 58.6 percent of our malware in the target machine's file system. This stop and start repeated several times during the scan. We re-ran this test several times, but 34.7 percent was the best IBM ISS managed in repeated on-demand scans.


BUILDING BLOCKS

Click here for a listing of additional features not included in our testing (PDF).

< PREV PAGE   |   1  |   2  |   3  |   4  |   5  |   6  |   7  |   8  |   9  |   10  |   11  |   12  |   13  |   14  |   15  |   NEXT PAGE  >





TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts