Will Windows 8 Destroy the Consumer Antivirus Market?
Microsoft showed off Windows 8 this week at its BUILD conference and revealed quite a bit about what we can expect. Among the many revelations was that Windows Defender will be expanded to offer full protection against all sorts of malware, on par with Microsoft Security Essentials.
PCMag's own software analyst, Michael Muchmore, said: "This obviates the need for a separate AV program."
But does it really? I asked experts from over a dozen major security companies and got a wide variety of responses. Here are the early responses
Some Vendors Unworried
GFI Software : "There will always be people who will opt for a free product," said Eckelberry, "and there are those who will prefer the enhanced functionality and technical support of a paid product. The fact that a free product is now baked into the OS will certainly raise eyebrows among antivirus companies (and potentially antitrust litigators) and it may have an impact on user purchasing behavior, but a pre-installed antivirus product is a far cry from the type of robust solutions you see today."
He went on to observe that "there is an entire financial ecosystem based around antivirus. For example, 'tech benches' (Geeksquad, etc.) make a handsome profit on selling users antivirus." Eckelberry concluded, "In the end, all a user needs is one bad infection to change their mind about their antivirus protection."
Check Point Software Technologies,(Zone Alarm) : "Microsoft hasn't gone far enough. "Any improvement in security is a step in the right direction," said Gable. "Malware is fast evolving, and consumers need more protection. However, one critical area that Windows is still lacking is a powerful and easy-to-use two-way firewall. Currently, Windows only has an active inbound firewall on by default. While users can turn on their outbound firewall, they will quickly be overwhelmed by alerts. Minimum security requires an effective inbound and outbound firewall that works silently in the background to stop Internet attacks at the front door and catch thieves on the way out."
Symantec Unimpressed
Symantec vice president of product marketing, had a lot to say on the subject. Like CheckPoint's Gable, he feels Microsoft hasn't gone far enough. "In today's threat landscape," said Plante, "it's clear that the protection consumers need is more comprehensive than what basic antivirus offers. Antivirus is just the first basic layer. On top of that, reputation, file, behavior and network based protection are needed to help fully protect consumers."
Plante also noted that the existing Microsoft Security Essentials product doesn't offer the best protection. "This next version of Windows Defender is just a repackaging of Microsoft Security Essentials. In a recent third-party, real-world protection and remediation test conducted by AV-Test GmbH… Microsoft Security Essentials came in last out of a total of 13 security solutions."
Finally he casted doubt on the idea of relying on Microsoft for security. "When it comes to securing their data and personal information, consumers need to look to a company that has shown a consistent commitment to security. Microsoft's history in the security space and the deviations it's made from its original strategy, starting with the abandonment of Windows Live OneCare, should leave consumers uncertain about relying on Microsoft to protect what they value most."
Webroot Welcomes Change
Webroot chief architect, Mel Morris, thinks that Microsoft's move will benefit the antivirus industry. "We welcome Microsoft's initiative," said Morris. "It makes conventional AV available to a wider audience. People will then realize and in turn focus more on what the real threats are." He went on to observe, "Microsoft's motives are probably more aligned to helping drive revenue growth than making a real impact on Internet safety."
"From a security perspective," added Morris, "this initiative is insignificant compared with [Microsoft's] move to add anti-phishing protection to Internet Explorer." Morris did express concern for Windows 8 users who already have a conventional antivirus installed. He worried that the conventional antivirus and Windows Defender "may have compatibility issues, cause performance issues, or even fight and stop each other from working."
"Today's threats are designed to avoid detection by conventional AV products," continued Morris.
Security Monoculture a Problem
Kaspersky Lab : "From a technical perspective this would mean malware authors will make sure their creations go undetected by MSE/Defender before deployment," said Schouwenberg. "We've seen this over the years. With the growing popularity of Windows 7 there's been more focus on circumventing [User Account Control]. If MSE were to become a standard the bad guys will simply adapt."
Read more