News & Information for Technology Purchasers
NewsFactor Network Sites:   NewsFactor.com Security CRM Business Sci-Tech Newsletters XML/RSS Feed  
   
Home Enterprise I.T. Hardware Software Communications More Topics...
Network Security
Average Rating:
Rate this article:  
Expert: McAfee Mac Security Report Is Expert: McAfee Mac Security Report Is 'Scaremongering'
By Walaika K. Haskins
May 8, 2006 9:15AM

    Bookmark and Share
Andrew Jaquith, an analyst at the Yankee Group, called the McAfee report "sloppily written and sloppy in its use of statistics." It is, he said, "a speculative house of cards resting on a foundation of shaky statistics and questionable assumptions."
 

Advertisement

The prevailing belief among Mac users that their systems are more or less impervious to hack attacks might be incorrect, according to a report released late last week by security Relevant Products/Services firm McAfee. The company found that the number of vulnerabilities in the Mac platform has increased exponentially over the past few years.

"Many believe that using an Apple operating system is a form of security in itself," said Stuart McClure, senior vice president in the Global Threats division at McAfee. But, he said, "Apple's Mac OS platform is just as vulnerable to targeted malware attacks as other operating systems."

McAfee's report follows on the heels of a study by the SANS Institute that placed Mac OS X at the top of its list of potential security vulnerabilities. Both reports join a litany of statements from security experts who have begun to rethink their assumptions about Mac users having little to worry about when it comes to malware attacks.

However, while many in the security industry have jumped on the "Mac is not secure" bandwagon, several experts have taken issue with the way the Mac is being positioned as a potentially insecure system.

Not Bulletproof

Andrew Jaquith, an analyst at the Yankee Group, is one such expert. He called the McAfee report "sloppily written and sloppy in its use of statistics." It is, he said, "a speculative house of cards resting on a foundation of shaky statistics and questionable assumptions."

As one example, said Jaquith, McAfee has confused software flaws with attacks. In the report, Jaquith said, the company cites vulnerability figures from Secunia, a security software firm, as "attacks," even though Secunia itself identifies them as "vulnerabilities."

Software flaws are not the same as attacks against the end user, Jaquith pointed out. "Saying otherwise is scaremongering, pure and simple," Jaquith said. "And, in fact, they don't document a single confirmed attack."

Jaquith did say that the Mac, like any other system, is not impenetrable. He also pointed out that Apple, for its part, has never claimed that Mac OS X is bulletproof. "No Mac users that I know think that way either."

Antivirus Capital

Rob Ayoub, an analyst at Frost & Sullivan, said that there is some truth that Mac OS X has a growing list of vulnerabilities. But, like Jaquith, Ayoub took issue with some of the report's statistics.

He pointed to the numbers in the report that indicated known Mac vulnerabilities increased by 228 percent, from 28 to 143, while Windows flaws increased only 73 percent. McAfee's failure to provide a specific number for Windows was significant, Ayoub said.

"I'm sure the Windows numbers are there, but my question is, '73 percent of what?'" Ayoub said. "We are seeing a marked increase in the number of flaws and attacks on Macs, but it's not anywhere close to Microsoft Relevant Products/Services."

Ayoub did agree with the report's conclusion that Mac users should install security software on their systems. "I can't blame McAfee for wanting to capitalize on that," he said.

Unfortunately, he went on to say, "it's going to take something big like the major attacks and major loss of service" for Mac users to purchase antivirus software.
 

Advertisement


Advertisement


 Network Security
1.   Peer-to-Peer Software Ban Sought
2.   Los Alamos Computer Security Weak
3.   Security Firm Fortinet Plans IPO
4.   Heartland Restraining Order Denied
5.   Social-Networking Security a Concern


advertisement
Social-Networking Security a ConcernSocial-Networking Security a Concern
Facebook hijacking shows dangers.
Average Rating:
ICANN Approves International NamesICANN Approves International Names
Dramatic increase in users expected.
Average Rating:
Center Opens To Battle CybercrimeCenter Opens To Battle Cybercrime
Increasing threat from hackers seen.
Average Rating:


advertisement
Product Information and Resources for Technology You Can Use To Boost Your Business

Enterprise Hardware

  Go Green with IBM Blade Center
  

Network Security Spotlight
House Lawmakers Push Ban on Peer-to-Peer Software
Stung by an embarrassing electronic leak revealing ethics investigations into dozens of lawmakers, Congress moved to prohibit federal employees from using the file-sharing software blamed for the disclosure.
 
GAO: Los Alamos Computer Security Has Weaknesses
Security weaknesses uncovered in Los Alamos National Laboratory's computer network increase the risk of a classified-information breach, says the Government Accountability Office.
 
Computer Security Firm Fortinet Plans IPO This Week
Fortinet plans to go public in an initial public offering, giving investors a chance to tap a network security provider with sales that are expected to grow. The IPO could be valued at $137.5 million or more.
 

Enterprise Technology Spotlight
Flat Shipments Hurt Dell Despite Increased Earnings
Dell's earnings are up and expectations are solid, but the company's stock still took a hit after analysts signaled the company isn't playing a key role in the PC market recovery.
 
Smartphones: A Bigger Target for Security Threats
Smartphones are increasingly prevalent and adept at handling more tasks, including trading stocks, paying bills, and buying stuff online. That makes them attractive to thieves and hackers.
 
FBI Says Hackers Targeting Law Firms, PR Companies
Hackers are targeting law firms and public relations companies with a sophisticated e-mail scheme that breaks into their computer networks to steal sensitive data, often linked to large corporate clients.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Hardware | Software | Communications | Network Security | Wireless Tech | Linux/Open Source
Apple/Macintosh | Microsoft/Windows | World Wide Web | Data Storage | E-Commerce | Personal Tech | Tech Trends | Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | Free Whitepapers | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2009 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo.