Malware Evolution: MacOS X Vulnerabilities 2005 - 2006
Jul 24 2006

Claudiu Dumitru
Kaspersky Lab

This article looks at vulnerabilities detected in MacOS X in the
first half of 2006. It compares these vulnerabilities to those
detected in the first half of 2005, providing an overview of the
evolution of threats targeting this increasingly popular platform.
Introduction

The Apple Macintosh is becoming more and more popular. However,
recent reports on Mac security have caused extensive discussion among
security professionals. Those who have expressed concern about the
increasing number of vulnerabilities detected in Mac OS X have been
accused of overreacting. The other side of the coin is that those who
do not take this viewpoint are accused of being lacking in common
sense. This article examines several aspects of the recent evolution
of threats for Max OS X in order to help readers understand the
ongoing debate, how secure Macs really are and how secure they will
remain.

I believe that out-of-the box machines running under Mac OS X are
more secure than those running under other platforms. The Mac OS X
*nix-like security model is, by default, configured to protect the
system against threats common to other platforms where this kind of
security and configuration is not standard. It could well be said
that from the start, Mac OS X was designed with security in mind.
However, although this approach seems to leave far less security
flaws that can be exploited, assuming that there are no security
issues at all is quite dangerous. Like any other platform, Mac OS X
has software flaws. Such flaws inevitably draw the attention of
malicious users, especially if users don't think they need to take
action to protect against possible threats.

One interesting aspect of the vulnerabilities identified is the
components in which they are present. The number of vulnerabilities
identified in components where remote attacks are possible increased
in comparison to the same period last year. This clearly demonstrates
that possible attack vectors are receiving more and more attention.

...

http://www.viruslist.com/en/analysis?pubid=191968025



Reply with a "Thank you" if you liked this post.
_____________________________

MEDIANEWS mailing list
[email protected]
To unsubscribe send an email to:
[EMAIL PROTECTED]

Reply via email to