Lesson Learned- Updating List Based Systems is not always Healthy
Lessons Learned from McAfee
In the past couple of weeks McAfee had the unthinkable happen. They released a false positive update that caused computers to shut down. Let’s learn from this.
Security protection schemes have been heavily dependent on lists. Whether they were blacklist or whitelist they are still based on known events. The pressure of every manufacture to distribute these update list has reached fever levels. Updates are being sent out every few minutes. Yet we continue to get viruses, honest mistakes are being made, and quality suffers. It is a vicious cycle.
In order to meet the objectives of updating in near real time, something in the process has to be accelerated. The emphasis of Testing prior to release is what is suffering. No one can testing every scenario, however, accuracy does require a relative amount of testing.
The only way to stop the unknown and mutated attacks is through an Intelligent Learning System.
Barrier1- The only Intelligent Network Security Appliance that can inspect all 7 OSI layers in near real time.