Enterprises Need To Build Defence Against Malware

Enterprise IT research firm, Burton Group has said that enterprise organizations should stress on building a full spectrum defence against malware as it is fast turning into a serious threat to businesses worldwide.

According to Dan Blum, Burton Group senior vice president and research director, “With more targeted attacks and better attack construction tools, there is much more ’zero day’ malware in the wild. Yet protection products generally detect less than 50% of previously unseen malware.”

Blum said that the status quo practice of relying heavily on signature-based detection is not adequate because vendors can’t keep up with the constant flood of new malware that exposes organizations to a window of vulnerability. However, while heuristic and behavioural detection will become more important, signature detection will still be required.

The firm’s core recommendation is that organizations adopt a full-spectrum defence that includes endpoint, network/perimeter, application, service provider, and law enforcement layers. This strategy should include a risk- and information-centric view of protection into the way enterprises govern and control infrastructure, business units, users, and partners.