McAfee ’re-invents computer security’
The technology, called McAfee Artemis Technology, uses an Internet-based service hosted by McAfee Avert Labs to provide active protection on the fly when a computer is hit by malicious computer code. Artemis is designed to shield computer users against attacks as they happen without requiring a traditional, scheduled update of threat signatures to be installed on the machine.
"McAfee Avert Labs projects a true malware onslaught this year with 300% more malicious programs in 2008 compared to 2007," says Jayson O’Reilly, regional director: Africa (acting) at McAfee SA. "Clearly today’s threat landscape requires a different approach to malware detection. Artemis works in Internet time, thus providing unprecedented protection."
Malware writers are becoming more sophisticated in their techniques. Financially motivated attacks have doubled, with eight out of ten attacks designed to make cyber criminals money. Attacks primarily arrive via the Web or e-mail and the vast majority of today’s malware is programmed to quietly steal a victim’s sensitive information.
The FBI has estimated that the average cost to a business per attack is $1200 for consumers and more than $350 000 for enterprises. Additionally, organisations face data loss, disruption to business, loss in productivity and non-compliance with regulatory requirements, while consumers face the perils of identity fraud.
McAfee Artemis Technology is said to provide a new weapon in the fight against cyber crime, and to allow McAfee’s security products to provide protection from known and emerging threats.
Traditionally malware detection has relied on databases with threat signatures on the user’s computer. This approach requires that the threat databases on each computer are updated with signatures for each new threat to provide the latest detection. As a result there is an inherent delay from when the threat is first identified to when protection is available at all computers.
"The traditional signature-based approach to detecting malware is no longer enough," continues O’Reilly. "While user behaviour has changed and the threat landscape has evolved, malware detection technology generally has not kept pace. McAfee’s program represents a major shift in how the massive increase in malware should be dealt with. This approach returns the innovation initiative to the defence, one-upping malware writers."
Artemis is said to virtually eliminate the protection gap by providing rapid reaction to threats for which signature files have yet to be released. When a suspicious file is detected on a computer protected by a McAfee product containing Artemis, the Artemis technology is designed to connect to McAfee servers in real time to determine whether the file is malicious or not. This check happens in seconds without any material impact on the user’s experience.