Microsoft moves into antivirus realm

Antivirus software makers aim to protect users against Internet threats, but now have to face a new threat of their own: Microsoft.

The software titan ventured nearly to the Black Sea to get the venture under way. On Tuesday, it announced plans to purchase the technology and intellectual property of Bucharest, Romania-based antivirus firm GeCad and hire some of the company's employees.

Microsoft positioned the acquisition as the next step in its Trustworthy Computing initiative, a move aimed at securing what the company estimates as the nearly two-thirds of Windows users who don't have up-to-date antivirus software on their computers. While the software giant hasn't finalised how it will use the technology, the intent is to provide a paid-subscription service to Windows users, said Mike Nash, vice president of Microsoft's Security Business Unit.

"If they want to use antivirus software from Microsoft, that option will be available," he said. "I can't predict where customers are going to go, but I can tell you that our absolute goal is to get more customers protected."

While the Redmond, Washington, company charges consumers monthly fees for its MSN Internet service and for some online games, Windows Update--its security patch service for consumers--remains free. Nash said there are no plans to change that.

Microsoft can't predict how much revenue such a service could generate, Nash said, because the company doesn't know the final form the service will take.

The announcement had some antivirus software vendors worried. In some ways, the move into the antivirus market resembles Microsoft's attack on the browser market in the 1990s, an assault that left it with the vast majority of that market and the former leader, Netscape, as a footnote in Internet history. Wall Street, at least, seemed to see the similarities: The stock prices of antivirus software leaders Symantec and Network Associates dropped modestly in trading on Tuesday.

Gene Hodges, president of security software maker Network Associates, which commands a significant share of the antivirus software and services market with its McAfee products, waved off the comparison, however, saying that browsers are simpler than security software. Most antivirus software uses signature-based and heuristic-based algorithms to recognise threats. Signatures are short code snippets or patterns found in a virus or Trojan horse that are unique to the program. Antivirus software can use such identifiers to weed out bad programs from the good. Heuristics-based recognition tends to focus on behaviour; for example, a program the sends itself out to a large number of e-mail addresses is likely a virus.

Hodges compared the potential inclusion of antivirus software in the Windows operating system to the incorporation of a personal firewall in Windows XP: The software improved the security of the operating system, but third-party personal firewall software still sells well.

Analyst Peter Lindstrom with Spire Security agreed with that assessment. "Some people are saying that the antivirus market is going to die because of this," he said. "That's hogwash."

Several antivirus firms, including security company Symantec, decided to wait for more information before commenting on the issue. Other companies that depend less on antivirus services for revenue, such as Computer Associates International, seemed less concerned.

Building trustworthy software

However, Microsoft left little doubt that the company planned to integrate antivirus protection into future operating systems.

"We see this as an important part of the platform," Microsoft's Nash said. "In our mind, it is consistent with our overall strategy of making the platform more trustworthy."

GeCad's antivirus engine, known as RAV, has performed comparably on tests to wares from other major antivirus companies, according to studies by the University of Hamburg. The company, little known until now, will still operate as a consultancy, Microsoft said.

Over the past year and a half, Microsoft has focused on improving security and making its product more trustworthy. With its reputation suffering from well-known virus and worm incidents such as Code Red, Nimda and now Slammer, the company retrained thousands of developers, revamped its development process, delayed shipping Windows Server 2003, and has released security guides for administrators.

The company has vowed to incorporate better support for antivirus software into its operating system, and created a virus information alliance to work with security firms on fighting the digital pests.

While the software giant could use its new technology to garner subscription revenue from the consumer market, antivirus companies predict the company will have a much harder time breaking into the enterprise market.

"Large companies want to choose best-of-breed (software) for better efficiency," said Chris Belthoff, senior security analyst with antivirus software maker Sophos. "All vendors have high (virus) recognition rates--what really matters is responsiveness."

Belthoff believes that the expertise of his company and others will set it apart.

"Microsoft has become one of several vendors now," he said. "I don't think they have a major advantage."

Advertisement

Talkback 4 comments

    So rather than making their pr ...MrDamage -- 11/06/03

    So rather than making their products more secure and harder to infect, they go along and buy out and AV company to "intergrate" yet more bloat into their OS.

    10' pole not needed. I aint touching it.

    Secure and fix the OS I say. ...Anonymous -- 11/06/03

    Secure and fix the OS I say.

    I thought the whole reason why viruses are rampant on Windows was becasue MS didn't incorporate some kind of file size monitoring feature to warn consumers something was altering files or doing something else.

    I'm just a simple farmer boy - me not smart eh ;-)

    May be I am toooo Old. But Was ...Perseus -- 11/06/03

    May be I am toooo Old. But Wasn't there one AV from M$ long time back ? Say Circa 1993-4 ?

    Something Called PSAV was later renamed to MSAV back then.

    One Wonders Whatever happened to that ?

    Yeh that was Central Point AV ...Anonymous -- 11/06/03

    Yeh that was Central Point AV rip off...

    Hahaha.. Has anyone even heard of these other AV guys before? Does this bring back nostalgic times when it was l33t to run AV because no one else did? Hahaha

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Sick of broken tender sites
    Some of the state governments desperately need to invest in more user-friendly tender sites so that looking for information on government tenders doesn't have to be a game of blind man's bluff.
  • Array Cyberwar: What is it good for?
    In this week's episode, Cyberwar. What is Australia's place in the world of digital warfare? What are the implications for the NBN?
  • Array Is wholesale-only backhaul just a pipedream?
    The potential acquisition of Pipe Networks by SP Telemedia has raised the question about whether vertically integrated backhaul providers will mean higher wholesale prices for ISP customers.
  • More blogs »

Tags

Back to top

Featured