Sandbox security versus the evil Web
Vendors have been scratching their collective heads attempting to make more consumers safer online. One of the results has been a class of anti-malware software that I call sandbox protection products. These items encapsulate Internet browsers (and e-mail programs and sometimes any other program you can run) within a virtual, emulated cocoon designed to keep malware from reaching and modifying the underlying host computer.
View full article »
Esther Schindler
If the comments are ugly, the code is ugly
claird
SVG a graphics format for 21st century
pasmith
Take Chrome OS for a test spin
Sandra Henry-Stocker
Solaris Tip: Have Your Files Changed Since Installation?
jfruh
Android fragments vs. the iPhone monolith
mikelgan
What Gizmodo missed about the Pro WX Wireless USB disk drive
Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.













More Effort Needed
These products work well when the malware has been circulating for a while and their behavour becomes known. Very few are able to detect new malware unless the malware does something obvious and even then most rely on a warning to the un-security educated user to make a decision.As we know the malware writers are much more organized bunch of people, writing some very sophisticated code. It's time the industry stopped waving a fly swot at the charging bull and focused on intelligent solutions to this problem.
The vast bloated software from the AV industry which degrades the system performance, corrupts the OS and generally provides a false sense of security isn’t good enough. The products in this review at least make an attempt to improve security but still at the cost of vast numbers of users getting infected before the products understand the behaviour to start protecting. This still isn’t good enough.
Analysing program execution in real time is the only method that will detect malware in sufficient time to be effective and it is this direction the industry should put more effort.