0 pts.
 Systems to reduce Spyware, Adware and Malware into users PC
Hi all, I would like to implement something to reduce the chances for users to be hit by Spyware, Adware and Malware while surfing the internet. What kind of systems would you recommend? Thanks

Software/Hardware used:
ASKED: February 1, 2005  4:25 AM
UPDATED: February 3, 2005  1:01 PM

Answer Wiki:
There are two primary approaches to this problem: The centralized approach and the distributed approach. Which one you choose depends on your environment. If you have a large enterprise, you might want to look at a proxy server like the Blue Coat Systems with Websense content filtering, which has some functionality to control the problem. If you have a smaller network and you have more control over the user PC's, you might want to consider something like: Pest Patrol, Spy Catcher, etc. You can find some articles in the following links: http://www.infoworld.com/article/04/10/01/40FEspyreview_1.html http://www.nwfusion.com/bg/2004/spyware/index.jsp?docid=5035 Also, don't underestimate the power of policy and user awareness education. Usually, this type of software is loaded from a user's activity on the web. If you can convince your users to behave themselves, you'll see fewer problems.
Last Wiki Answer Submitted:  February 1, 2005  10:33 am  by  Telecomking   0 pts.
All Answer Wiki Contributors:  Telecomking   0 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

First off, I’d like to say what a good response Telecomking had. Much of what I’ve got to say is a follow-on.

Most larger organizations are turning to user education. I myself do a 30 minutes (no, this isn’t an ad for me)presentation to groups called “The State of Spyware”, and it’s had a good effect in terms of educating people to the sorts of problems that occur with spyware – and in getting them to curtail some of their own activity.

Another approach which I’m developing into a service, but which anybody (with the time) can do for free is to set up a copy of snort to watch the Internet connection when using the bleeding-edge malware/virus rules from bleeding-snort.com. They’re not perfect (which is why they’re on bleeding-snort) but they do an amazing job of catching things – and if you’ve got one system with some identifiable stuff on it, chances are there’s more as well.

No point in going over Telecomking’s other stuff, he’s done quite well there.

Bob

 1,070 pts.

 

I don’t have a direct answer, but I found some white papers on this server while looking for something else. Some of these may be of help to you.

Bob

http://searchwindowssecurity.techtarget.com/whitepapers/0,293835,sid45,00.html

 1,070 pts.