There was a hammered attack in corporate network with a slew of viruses and worms, and nearly all of them focused on the vulnerabilities in Mirosoft’s softwres. People started moving from windows to Linux, but the question is, Is Linux really SECURE then Windows????
Answer is, yes for now….
Well each operating system has its security strengths and weaknesses. Windows flaws have been cropping up faster than some people can track, forget patch. But Linux has its own troubles with vulnerabilities. They simply don’t get as much media attention. And that’s because Linux isn’t as ubiquitous as Microsoft’s Windows. Windows flaws get more attention because nearly everyone — from Fortune 100 security managers to their mothers and neighbors — needs to know about them.
And it’s Windows ubiquitousness that is getting it into trouble…
”Virus writers like to make a name for themselves and they do that by infecting the masses,” says Steven Sundermeier, a vice president at Central Command, an anti-virus company based in Medina, Ohio. ”If you want to have a well-documented, wide-spread virus, you go after the Microsoft operating system. That doesn’t mean that Linux can’t be exposed to viruses. It just means it’s not a real target at this point. But that could change.”
Sundermeier points out that Central Command has documented more than 200 viruses specifically targeting the Linux operating system. It sounds like something until you realize that the company has documented a total of approximately 75,000 viruses. And when you factor out the viruses aimed at DOS-based systems and Unix, you have 65,000 to 70,000 viruses specifically targeting the Windows side of things.
And vulnerabilities and viruses have become a critical concern for IT managers. Symantec Corp., an anti-virus and security company, recently noted that the number of reported software bugs skyrocketed 81.5% last year. That means the amount of time and attention managers have to focus on patching bugs and preparing to fend off malicious code has multiplied at the same rate.
All too often, patches aren’t applied because the manager wasn’t fast enough on his feet, other projects got in the way, that particular patch just got lost in the flood of patch notices or simply because the IT manager didn’t have enough time. No matter the reason, when patches aren’t applied, it can have devastating effects.
For example, despite the fact that Microsoft had sent out alerts in July for a vulnerability in its Remote Procedure Call (RPC), the Blaster worm that exploited the flaw still caught millions of people unprepared in August. And Sobig-F, which so far is the latest variant in the Sobig worm family, wreaked millions of dollars worth of havoc on networks around the world. The Sobig worm has been around for months, but companies are still being hit because they’re not patched and ready.
All of this virus havoc is being unleashed on Microsoft systems.
More attacks comming towards Linux
But as Linux grows in popularity, that may not remain the case. The more Linux systems out there, the bigger and better the target they create.
That may already be happening.
Linux was the most-attacked online server operating system in August, according to a report from mi2g, a digital risk assessment company based in London. In August, 67% of all overt digital attacks targeted Linux. Windows received 23.2% of the attacks.
But despite Linux being the target of the majority of overt, or known, digital attacks, virus attacks on Windows caused much greater financial damage. Thanks to the havoc that Sobig-F and the Blaster worms wreaked, August reportedly has gone down as the worst month in digital history for virus attacks. Last month, viruses, along with overt and covert hacker attacks, caused $32.8 billion in economic damages, according to mi2g. Mi2g also notes that the Sobig virus alone accounted for $29.7 billion of economic damages worldwide.
”Linux isn’t more or less secure than Microsoft, in the respect that it’s certainly possible to create viruses and worms that target Linux and to initiate intrusion attacks against Linux,” says Chris Belthoff, a senior analyst at Sophos, Inc., an anti-virus company based in Lynnfield, Mass. ”If there is a market shift and more Linux is out there, it’s almost a certainty that you’ll have more malicious code targeting that platform. It simply would meet the virus writers’ needs.”
Dan Woolley, a vice president at Computer Associates International Inc., says he expects to start seeing virus writers branching out when it comes to targets. And that’s not good news for companies running Linux.
About shk
Hi, good post. I have been woondering about this issue,so thanks for posting. I’ll definitely be coming back to your site.