Anti-Spyware Solutions for MIT IT Partners Conference, April 19, 2005 Jonathan Hunt Senior Manager Software Service, IS&T
Agenda What is Spyware and why is it a problem What is Spyware and why is it a problem Is it all bad? Is it all bad? How do I get Spyware? How do I get Spyware? What to do about Spyware today? What to do about Spyware today? How to avoid getting Spyware? How to avoid getting Spyware? When will it get better? (Soon ) When will it get better? (Soon )
What is Spyware and why is it a problem Microsoft’s Definition Microsoft’s Definition –Spyware and other unwanted software refers to software that performs certain tasks on your computer, typically without your consent. This may include giving you advertising or collecting personal information about you. Exposes (or potential to expose) Private Information: Exposes (or potential to expose) Private Information: –Credit Card # (Bank Accout Numbers) –SSN –Usernames & Password –Address Book (to SPAM)
Is all Spyware Bad? A lot of Spyware is not intentionally malicious, but… A lot of Spyware is not intentionally malicious, but… –Causes system problems –Hard to remove –Collects info that another program could grab –Show Ads (some people enjoy Ads) Dependent on Personal Opinions Dependent on Personal Opinions
How do I get Spyware? Installing software from unknown sources Installing software from unknown sources –“Free” versions of commercial software –Freeware from untrusted sites or mirrors Peer-to-Peer (e.g. Kazaa) file sharing systems (often trojanned) Peer-to-Peer (e.g. Kazaa) file sharing systems (often trojanned) Added components for browsers Added components for browsers –Services that give credit for surfing sites that require you to install something locally – attachments (usually in SPAM) Not reading the fine print of End User License Agreements (EULA) Not reading the fine print of End User License Agreements (EULA)
What to do about Spyware today Microsoft says to use their Beta*: Microsoft says to use their Beta*: – spywarewhat.mspx spywarewhat.mspxhttp:// spywarewhat.mspx –Available for Windows 2000, XP and Server 2003 Or use one of the leading shareware programs on the market: Or use one of the leading shareware programs on the market: –Lavasoft’s Ad-Aware –Spybot Search & Destroy * Slide corrected since presentation to note the MS tool available for more than just XP
Comparison Tool Long Term DetectCleanBlockUpdateCost Spybot S&D ?GoodMostYesYes?$ AdawareokGoodGoodNoNo?$ MS Anti- Spyware GoodGoodGoodYesYesfree VirusScan Plug-in ?GoodGoodYesYes$$
How to avoid getting Spyware Keep your operating system, browsers, and other applications patched Keep your operating system, browsers, and other applications patched Only install software from trusted sources Only install software from trusted sources –Free isn’t always “FREE” of problems Read EULA before accepting Read EULA before accepting Install and Use Anti-Virus and Spyware blocking software Install and Use Anti-Virus and Spyware blocking software –Anti-Virus: MIT licensed Virus Scan Enterprise 8.0i –Anti-Spyware & Spyware Blocker: Microsoft Anti-Spyware (Beta) Only open attachment that you were expecting Only open attachment that you were expecting
When will it get better? Major Vendors getting involved Major Vendors getting involved –Microsoft release a Beta AntiSpyware re/software/default.mspx re/software/default.mspx re/software/default.mspx re/software/default.mspx –NAI/McAfee released a Beta plugin for VirusScan Enterprise 8.0i