Microsoft still has work to do when it comes to malware security

Image: AV-Test.org

According to AV-Test.org , an independent security research organization, more than 390,000 new malware applications are discovered and registered every day. No matter how you slice it, that is a lot of malware to track and counteract. No wonder so many enterprises fall victim to malware attacks―their defenses are overwhelmed.

Microsoft continues to renew its commitment to creating a secure operating environment for its enterprise clients, but there is very little the software company can do to counteract the major weakness in all security systems: people. Technology, no matter how sophisticated, can't outwit its users.

In October 2016, AV-Test.org conducted its annual test of all the major purveyors of security software on both a consumer and enterprise level. The organization carried out more than 13,000 malware attacks against 22 consumer applications running under windows 10 and 12 enterprise endpoint security solutions running Windows 8.1.

The test criteria were based on three factors: protection, performance, and usability. The good news is that all the test applications passed and received AV-Test's official certification. As you might imagine, some applications protected better than others and some applications performed better than others. But only a few did all three factors well.

SEE: Despite privacy concerns, Microsoft calls Windows 10 the most secure version of Windows

In the enterprise test, Microsoft's System Center Endpoint Protection fell in the fair-to-middling range, achieving an overall score of 14 out of a possible 18. By comparison, Bitdefender and Kaspersky Labs had the highest scores, both posting perfect 18s.

Image: AV-Test.org

Examine the numbers a little more closely and you will note that Microsoft's endpoint solution had very good performance and usability scores with a mediocre protection score. Perhaps Microsoft traded protection for better performance?

The consumer part of the test shows that Microsoft Windows Defender running in Windows 10 also failed to impress in the protection factor, while scoring fairly well in performance and usability.

On a global scale, malware costs enterprises and consumers billions of dollars in lost productivity and worker hours every year. It is a big problem and there is little hope malware will ever be truly eliminated.

The AV-Test seems to show that, while Microsoft has professed a renewed effort to combat malware attacks in its products, it still has a long way to go. In real-world scenarios, Microsoft's malware protection solutions and applications are mostly adequate, but they could be, and should be, improved.

Image: Microsoft News

Technology is only part of the problem, however. The easiest and most common way malware gets into an enterprise is through its people. Human beings, no matter how well-trained or how well-intentioned, are flawed and prone to manipulation by other human beings. Technology can reduce the number of ways malware can enter a system―but as we all know, users often circumvent technology in the name of convenience or expedience.

People are the weakest link in any security system. IT professionals must contend with this fact on a daily basis, and while better technology certainly helps, it is not enough. So yes, Microsoft should continue to improve its security solutions across the board, but that is not going to completely solve the problem of malware in the enterprise. Unfortunately, no system is ever truly secure.