Security vendors are racing toward a new antimalware technology model

[Venustus]

While the calendar still indicates that we are in Q1 2014, the security industry continues as a nexus of M&A activity. The year started with FireEye grabbing Mandiant, and proceeded to Bit9's merger with Carbon Black, and yesterday's announcement that Palo Alto's intent to acquire Cyvera.

These are the most recent deals but similar M&A activity is well established. In 2011, Sourcefire acquired cloud-based AV startup Immunet. Just last year alone, McAfee purchased ValidEdge in February 2013, IBM snapped up Trusteer in September, and Blue Coat grabbed Norman Shark just before the Christmas holiday.

These deals vary in size and timing but the overall strategy across all of them is pretty consistent. The steep rise in cybercrime, targeted attacks, and sophisticated malware is wreaking havoc on large enterprise organizations and CISOs are scrambling to reinforce their defenses and mitigate risks as quickly as they can. Given the flurry of demand-side activity, security vendors are busy buying companies and deliver comprehensive anti-malware solutions to capitalize on this market opportunity.

So what does this new anti-malware model look like? Based upon the ongoing shopping spree, security vendors are trying to build an integrated portfolio with:

More

 

[ifacedown]

Awesome! I wonder though how cybercriminals upgrade themselves.

 

[Littlebits]

This new technology still will not be able to protect reckless users if anything it will just trigger more false alerts for safe processes.

Enjoy!!

 

[Exterminator]

I agree with Littlebits in that operator error,if you will,will always be a factor no matter how good the protection is.

 

[Dubseven]

New anti-malware heuristic = New malware bypassing this technology.

 

[Ink]

And malware authors are always one step ahead.. state-funded of course.

 

[Nico@FMA]

New anti-malware heuristic = New malware bypassing this technology.

Yes and this is not necessarily due to the technology used in the anti malware industry but its to a large degree due to limitations within the windows kernel coding and standards.
For example Windows 8 is brand new but under the hood its still very much like Windows 7 and older versions.
So technology that can enhance malware detection is being limited by the very OS code it self.