Windows Vista
Kaspersky Lab believes that Vista's security may not be as effective as promised

Windows Vista security under fire

Kaspersky questions platform's ability to fight off malware

Written by Robert Jaques, vnunet.com

Microsoft's Windows Vista is "unlikely to deliver long-term robust security protection", an IT security vendor claimed today.

An article published by Kaspersky Lab questioned whether the current security functions implemented in Vista will be effective.

The report, written by Kaspersky virus analyst Alisa Shevchenko, examined the key security aspects of Vista, including User Account Control, PatchGuard and Internet Explorer 7.

Advertisement

Vista's User Account Control ensures that any user, including the Administrator, has minimal rights, and that any 'suspicious' activity results in either a request for confirmation or a request to enter a password.

However, Shevchenko believes that a large number of harmless actions can be classed as 'suspicious', even if they turn out not to be malicious.

Alerting the user to each of these is likely to cause such a high volume of alerts that the user will either disable the feature or enter the Administrator password.

Shevchenko also claimed that "any type of protection can be evaded, and because of this, the advantages provided by this new layer of defence are conditional, and as practice shows, temporary".

He went on to claim that PatchGuard, which monitors modifications to the core system, can be evaded or disabled.

Shevchenko also questioned PatchGuard's protection against root-kits as it only offers protection against certain types of root-kit, and not all.

"Vista is undoubtedly more secure than previous Microsoft operating systems. And a system which is configured in such a way that everything is blocked except for access to designated sites could be regarded as being absolutely secure," said the report.

"However, the majority of users will find the significant restrictions on actions which effectively sterilise the system unacceptable, just as the constant requests to confirm or enter a password for an action which the system defines as being 'potentially dangerous'.

"And it is at this point that the 'almost totally secure' system is transformed in to a 'more vulnerable' system'."

Tags:

Reader comments

More from Computeractive

News

The latest home computing news

Downloads

The best PC tools, applications and more

Reviews

Independent opinions on new hardware and software

Step-by-step guides

Easy-to-follow projects with pictures

PC Help

Solve PC problems with our Q&A

Videos

PC projects demonstrated and product reviews

Articles

An in-depth look at how to get the best from your PC

Magazine

What's coming up in Computeractive

Forums

Get help with your PC problems from our readers

Competitions

Your chance to win computing prizes

Shopping

Great deals on products, services and more

Computeractive CD Rom 10
All 26 issues of Computeractive from 2007 on one CD-Rom.

Ultimate Guide to PC Troubleshooting
Everything you need to know to solve your PC problems.

Create your own calendars softwareCreate your own Calendars
The fun and easy way to create your own calendars!

Computeractive - Issue 280Computeractive Back Issues
Missed an issue? Click here to find a back issue

Blogs

Windows Watch

Windows Watch

Keeping an eye on the latest XP and Vista news

Singing from the CES song sheet

07 Jan 2009Given the amount of times you're likely to hear the word 'innovation' at a technology showcase like the Consumer Electronics Show, it's...

Download Junkie

Download Junkie

Your daily dose of download discussion

Backup and synchronise documents across multiple computers

07 Jan 2009Working across more than one computer is fairly common for some people, maybe a desktop at home as well as a work...

Advertisement

Free email newsletters

Techno babble demystified...

[Display all definitions]

Or type in any computer-related word and click "Go"

Advertisement

Computeractive is not reponsible for content of Google adverts

Primary Navigation

© Incisive Media Ltd. 2009. Incisive Media Limited, Haymarket House,
28-29 Haymarket, London SW1Y 4RX, is a company registered in the United Kingdom with company registration number 04038503

Search computeractive.co.uk