Windows Vista
Symantec's study found that Windows Vista bocks up to 98 per cent of malware

Symantec clears Vista on malware

Not a secure system, just more sturdy than previous Windows versions

Matt Chapman

Microsoft's Windows Vista is more secure than previous versions of the operating system, according to security experts. 

Symantec's latest set of white papers found that rootkit malware will not install in Vista without users being notified, and that all kernel-level rootkits are blocked unless users ignore multiple pop-ups and click the 'Allow' button.

Advertisement

Graham Cluley, senior technology consultant at Sophos, said that the User Account Control in Vista is an important enhancement designed to prevent the installation of malware.

"However, it is also very intrusive with a high number of alerts that end users need to respond to, so there is a strong likelihood of it being disabled unless they are trained in how to use it," he added.

"This is one of the weaknesses that malware authors will undoubtedly attempt to exploit."

Symantec's study found that between 96 and 98 per cent of malware such as spyware and Trojans is also blocked.

However, the firm warned that malware writers could decrease those percentages by making only minor changes to their code.

Cluley agreed that Vista is the most secure operating system yet from Microsoft, but pointed out that it will still be targeted.

"Better security does not mean perfect security. The only 100 per cent secure computer is probably one without an internet connection, and with the keyboard and all disk drives disconnected," he said.

"There is malware that can successfully run on Windows Vista, so early adopters of the new operating system should still worry about worms, Trojans, spyware and the like."

Symantec's report also noted that the kernel protection is only offered in the 64-bit version of Vista, and that the 32-bit version is still open to attack.

Symantec praised features in the operating system that allowed developers to make their code harder to exploit.

But it also warned that this protection is only available if developers include it, and is missing from older Windows XP software and even some core components of Vista.

Symantec originally mauled Vista back in August 2006, pointing to security flaws that would allow computers to be easily overtaken by malicious parties.

"During this research we discovered a number of implementation flaws that continued to allow a full machine compromise to occur," the 2006 report said.

"By exploiting these flaws, a low-privilege, low-integrity level process can bypass User Account Protection, and ultimately execute code at a high-privilege, high-integrity level."

However, those tests were carried out on early release code and Symantec said that security would continue to be addressed until the final release, with some of the holes already plugged by Vista Beta 2.

Cluley concluded that the battle would continue between virus and malware writers and the team behind Windows Vista.

"There will continue to be flaws found in Windows Vista, and users will need to ensure that they are putting appropriate measures in place to defend themselves," he said.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Windows Vista

Hacker highlights gaping Vista security hole

Microsoft tries to play it down

Windows Vista

Windows Vista security under fire

Kaspersky questions platform's ability to fight off malware

Experts claim Vista security not fit for purpose

Ineffective blocking capabilities in Windows Defender, slow definition updates and weak antivirus

Trend Micro preps Vista security suite

Internet Security 2007 for Vista to ship on 30 January

Related whitepapers

Related jobs

Most watched

Summit video: Intel discusses processors designed for data overload (part one of two)

Intel explains how its Xeon processors can handle data-intensive apps

Summit: Intel discusses processors for data overload (part 2 of 2)

More thoughts on how servers can help manage overload

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

deloitte

Summit interview: Deloitte discusses security implications of the data deluge

We chat to Mike Maddison, UK head of Security, Privacy...

ibm logo

IBM boosts mobile shopping with WebSphere Commerce

Update designed to give mobile users a richer, more personalised...

Summit: Intel discusses processors for data overload (part 2 of 2)

More thoughts on how servers can help manage overload

chrome logo

Google plans a Mac version of Chrome

A Mac-friendly version of the browser is in the pipeline

Primary Navigation