Guest Post - Michael Senatore

Intern:  Michael Senatore
Topic:  Mac OS vs. PC

TITLE
Viruses and malware infecting Apple computers are on the rise and becoming increasingly problematic, leaving many asking the question, “Are Mac’s really more secure than PC’s?”


Internship Outline:  #2
Version 1.0
Date:  05 March 2011

SUMMARY
For years there has been an ongoing debate between not only Mac and PC users, but security analysts alike about which platform is more safe and secure.  Up until the past few years 99.9% of people would have said hands down, it was Mac that was the safest.  However over the last three to four years, the tides have changed to say the least.  Many would now argue that PC’s have surpassed the Mac in terms of security.  Naturally, the truth of the matter lies somewhere in the middle, as Macs are more safe but PCs are more secure.  Never the less, the debate continues to rage on.

BACKGROUND
For starters I think it is necessary to establish exactly what the difference is between safety and security.  Most people would think there wasn’t one; that the two go hand in hand, which actually is true.  However at the same time, there is a discernible difference.  The easiest way to examine the difference is to give an example.  What is more secure, a Honda Accord or an Army tank?  Obviously the Army tank is more secure in every way imaginable.  But what is safer, a Honda Accord driving through Nowhere Town, USA or an Army tank in the midst of a battle in Afghanistan?  In this instance you can forget about the security of the tank because undoubtedly the Honda Accord is the safer of the two vehicles.  In both examples, the Honda is the Mac and the tank is the PC.
This issue is currently at the forefront of the internet securities field, which is why I feel it is a pertinent matter to discuss.  With the current success of Apple and their products, the debate between Mac and PC continues to pick up steam.  As a consumer, the ability of an operating system to protect itself is a major topic of concern.  It is also one of the major selling points when a person is deciding to buy a computer.  For the casual home computer, the customer wants a secure platform that will help them to avoid the constant headaches of malware and other infectious viruses.

STRATEGIC PLANNING ASSUMPTIONS
-According to Charlie Miller, a principle analyst at Independent Security Evaluators, “Technologically speaking, PCs are a little more secure than Macs.  Macs have a larger attack surface out of the box.  This means Macs have more vulnerabilities, and it’s easier to turn a vulnerability into an exploit on the platform.  Despite the fact it is less secure, paradoxically, Macs are actually safe to use for most people.”
-Due to their insufficient security protocols compared to Microsoft, Apple products may show their vulnerability in the upcoming years.
-Where Microsoft has been lauded for their concerted efforts towards improved security, Apple is often criticized for ignoring these issues.

ANALYSIS
Thanks to the fact that Macs still lack some anti-exploitation technologies found in PCs, like full ASLR (Address Space Layout Randomizaton), they are not quite as secure.  ASLR randomizes the location where system executables are loaded into memory, which prevents malware looking for certain files in specific memory locations from being able to run its exploit.  This is just one example of a vulnerability of the Mac OS X, and to a hacker, vulnerabilities are almost like an invitation.  Microsoft has simply done more in terms of inherent security features than Apple.  Also, in the development of Internet Explorer 8, Microsoft is showing an extremely diligent commitment to security.  They have brought in teams of security professionals to look at their codes, leading to a more secure product.
Furthermore, the Mac OS X has a large attack surface consisting of open source components, closed source third party components, and closed source Apple components.  Viruses and bugs in any of these areas can lead to remote compromise.  Charlie Miller claims, “Mac OS X is like living in a farmhouse in the country with no locks, and Windows is living in a house with bars on the windows in the bad part of town.”  Once again there is a very fine line between the ultimate successes of these two operating systems when it comes to warding off security issues.

IMPLICATIONS
-57% of Mac users feel they can safely navigate the web without a need for anti virus protection.
-According to an ESET (Essential Security against Evolving Threats) survey, both Mac and PC users perceive Macs to be a more secure operating system.
-The same ESET survey showed that Mac users are victims of cyber crime just as frequently as PC.
- Although the Mac OS may be safer to use at the present time, this mentality is very problematic and will most likely fester into a bigger problem for Mac users in the next three to five years.
-If you gave a teenager a Mac for a week and a PC for a week, most likely the PC would come back with more security issues.  This is an example of why the most influential contributor to this issue is the person using the computer.


KEY FINDINGS
-The bottom line is that although PC’s may be more secure, Mac’s are currently the safer platform when it comes to surfing the web.
-PC operating systems have utilized ahead of the curve technologies such as ASLR to make their platform more secure.
-PC has made a concerted effort in the fight against malware by hiring outside security consulting firms to test their codes and systems for vulnerabilities.


RECOMMENDATIONS
-The safest way to navigate the web is to play it safe and use common sense.  Do not download programs and files from unknown sources.
-Stay educated on the issue of operating system security. Knowledge of the signs of unsafe internet sites will go a long way.  Being able to recognize these signs is another key aspect of keeping your operating system clean.
-Keep your computer up to date with security protocols and anti virus programming.  Take advantage of the updates that your operating system will provide for you.





SOURCES

“In their own words:  Experts weigh in on Mac vs. PC security.”  Elinor Mills.  news.cnet.com.  February 1, 2011.

“Mac OS X backdoor Trojan, now in beta?”  Chester Wiesnewski.  nakedsecurity.sophos.com.  February 26, 2011.

“Mac OS X:  ‘safer, but less secure.’”  Dave Courbanou.  h-online.com.  March 18, 2010.

Apple and Viruses. Guest Post by Spring Intern - Michael Senatore

Intern:  Michael Senatore

Topic:  Apple and Viruses

Internship Outline #1

Version 1.0

Date:  25 February 2011

TEASER / TITLE

For years, Apple products have had one up on the PC regarding viruses and malware.  However, due to increased market share, that time may be coming to an end. 

SUMMARY PARAGRAPH

Throughout the history of Apple products there has been a long standing consumer myth that they are incapable of becoming infected with viruses.  Most believe that the Mac Operating System was simply more secure than that of PC.  Although the system may be more secure, it is still vulnerable to malware and other infections.  One needs to look no further than the fact that Apple sells anti-virus software from many of the leading names in the virus protection industry.  What really gave Apple its edge was their lack of market penetration, a result of occupying a small portion of the computer sales industry.  Simply put, if you want to catch a fish, you go to the pond with the most fish.  That “pond” has always been PC’s.  However, along with their growing popularity and rise in market share, Apple products are becoming more vulnerable to viruses and other harmful infections.

BACKGROUND

The myth that Apple products are impervious to viruses is almost like a virus in and of itself.  Only instead of infecting Apple products, it is infecting the way Apple users think about the product.  This “myth” continues to mislead Apple users into believing they are safe from viruses and there is no need for anti-virus programming.  Unfortunately, life would just be too simple if this was the case. From reading forums and discussing the topic with owners of Apple products, it is blatantly obvious that Apple users are completely unaware of the harm to which they are exposing their computers.

            Currently there are several types of viruses that can potentially harm Apple products.  One of the main areas of concern is downloading files that are infected with Trojan horses, spyware, and worms.  These types of files can be found on pirated software and games.  Versions of Microsoft Office infected with viruses can also infect Mac products using the program.  Also, browser plug-ins for viewing video content can harbor malware, making your Mac more vulnerable to other infections.  These problems are really just the beginning because they do not take into account the growth and success of Apple and their products. 

STRATEGIC PLANNING ASSUMPTIONS

-Apple, the company, must do a better job of informing their customers of the risk to their computers.  What was once a selling point, needs to now be addressed as a concern.

-Apple users need to become more educated.  They need to open their eyes to the problem and take appropriate action.

-Acquire an anti-virus program.  Many of the major anti-virus companies, such as McAfee, Intego, Norton and Symantec have all released programs for Apple products. 

ANALYSIS

The main reason for the recent increase in viruses infecting Apple products goes hand in hand with the success of the company.  In just the past two years, Apple has consumed nearly 3% of the entire computer sales in the United States, raising their overall market share to 10.4%.  Although that may not sound like a large increase, Apple’s annual growth is nearly off the charts.  Over those same two years, Apple’s year to year growth has been 24.1%, which dwarfs the overall industry’s growth of 3.8%.  With the wild popularity of the iPad, iPhone and other Apple products, this percentage will only continue to grow.

            In any business venture, success has its drawbacks, and this same theory can be applied to Apple and their current surge in the United States computer sales industry.  As stated previously, the idea that Apple products were incapable of being infected with viruses was a selling point.  Many businesses opted to use Apple computers for their convenience and savings that go along with not having to worry about viruses or spend more money on anti-virus programming.  While Apple products once enjoyed the safety of their own anonymity, they must now accept what comes along with their new found popularity. 

IMPLICATIONS

-The “myth” of Apple products not being able to contract viruses is simply not true.

-Apple has become a mainstay of the computer industry, holding a market share of nearly 11%, a figure which continues to rise.  As a result of the increased penetration, the most secure days of the Mac OS are in the past.

-The vulnerability of Apple products goes hand in hand with the success of the company, which is growing at a rate nearly eight times that of the rest of the computer industry.

-While the sales figures of HP and Dell have plateaued, Apple continues to grow at an annual growth rate of 24.1%.

-Apple currently holds the number four ranking in the computer sales industry, behind HP, Dell, and Acer.  Following market trends, by this time next year, Apple will be well ahead of Acer and catching up to HP and Dell. 

-Due to the wild success of the iPad, iPhone and the Mac OS, there are no signs of Apple’s growth slowing down.

KEY FINDINGS

-The majority of Apple users are completely unaware of the susceptibility of their computers when it comes to malware.  Stay informed with updates from Apple and other security upgrades.

-The easiest way to prevent computers from being infected with viruses is to stop them before they start.  We all know how difficult computers can be to work with when they are infected with any type of virus. 

-Nearly all the major anti-virus companies now sell programs for Apple products.  (A sign of things to come?)

RECOMMENDATIONS

-Verify that your computer is protected by an anti-virus program.  There are some free anti-virus programs available, such as iAntiVirus and ClamXav, however they are not considered as robust as the major companies such as McAfee, Intego, Norton and Symantec.

-Use common sense when surfing the web.  Do not visit websites that are not known to be secure and do not download files or documents from an unknown sender.  Also make sure your virus scanner and security updates are frequently updated with the newest protection.

-Stay ahead of the curve by educating yourself with the current viruses and other problems infecting computers. 

-Happy surfing!

SOURCES

“Do Apple Computers Need Virus Protection”.  Robin Noelle.  eHow.com.  April 1, 2010.

“Apple’s Share of Computer Sales Surpasses 10% in the U.S.”.  Eric Slivka.  Macrumors.com.  October 13, 2010.

“Hey Apple, About This Virus Thing”.  Steven Hodson.  WinExtra.com.  April 27, 2010.

“Antivirus Software On Your Mac:  Yes or No?”.  David Greenbaum.  Gigaom.com.  February 4, 2011.