Kaspersky: Mac, Linux, BSD open for attack

By Darren Pauli, Computerworld Australia |  Security, Linux, Mac OS Add a new comment

Looming attacks will soon pop the security bubble enjoyed by Linux and Macintosh users, according to Russian security expert Eugene Kaspersky.

The co-founder of IT security company Kaspersky Labs said Linux and Mac users will be "easy targets" for hackers and malware writers over the next few years.

"Modern operating systems are flawed by design," Kaspersky said, "including OpenBSD".

"Mac and Linux are not as secure as [users] think; criminals pay no attention to them at the moment, but they will be vulnerable -- easy targets.

"The problem is that customers design the operating systems (either within open source communities or via market demand) and they choose flexibility over security."

The most secure operating systems such as Symbian 9 and 10 and mobile platform Brew have been pushed aside for their more functional counterparts, according to Kaspersky.

"Secure operating systems are unlikely to emerge in the foreseeable future," he added.

He said the Achilles' heel of flexible, popular operating systems is that they run unsigned applications.

"It takes a long time to get a certificates for applications, so secure operating systems have a limited set of applications and services," Kaspersky said.

According to Kaspersky, secure operating systems only attract about 1 to 3 percent of users because of their functionality limitations.

PureHacking senior security consultant Chris Gatford said the platforms will be increasingly targeted as more people migrate to them.

"It is lucky that to date BSD and Mac users haven't really been targeted yet because there are proof-of-concept malware around and a few in the wild," Gatford said.

"Users will always want to run whatever they want, whenever they want, regardless of security concerns."

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question