Feature

Spot-On Security Tips for Mac OS X Leopard

Mac OS X is generally unappealing to malicious hackers. But since its popularity is bound to attract notice from the bad guys, the new version of Apple's operating system sports several security features that users and IT departments should know about.

MORE ON ENTERPRISE MAC COMPUTING

What Apple's Leopard Means to the Enterprise

The TCO of Operating Systems: Compare the Big OSes

What is it about Mac OS X that makes it unappealing to hackers and other Internet interlopers? Nick Selby, senior analyst and director of enterprise security practice with The 451 Group, says it's simply that hackers tend to reach for the lowest-hanging fruit. Selby explains that hackers get the most bang for their buck by developing malicious code designed to infect the most likely combination of software in use today: Microsoft Windows XP or Vista running a version of Internet Explorer's Web browser. "That's where the action and the money are," says Selby. Other combinations—Mac OS X and the Safari browser, for example—just aren't as widely used and therefore are not worth a hacker's time to look for holes to exploit.

That doesn't mean, however, that Leopard users shouldn't take security precautions anyway. "Targeted attacks by motivated and skilled hackers are generally not stoppable," says Selby. "Best practices dictate regular patching, updates, firewalls, port blocking and scanning for activity on known botnet channels."

Ollie Whitehouse, architect with Symantec's Advanced Threat Reasearch Team, agrees. "It's fair to say Mac OS X has not been a significant target for attackers or malicious code authors to date. However, researchers have demonstrated that the potential for susceptibility to the same types of flaws which have plagued Microsoft Windows for so many years does exist to the same extent. We have also seen indications that malicious code authors are kicking the tires with at least one actual attempt through social engineering to get the user to install a Trojan.

"However due to smaller market share, Mac OS X has not been targeted in the same way as Windows. It's reasonable to expect this to change over time, as Apple's market share increases and Microsoft improves Windows security," adds Whitehouse.. Also, there are threats to data which affect all lost or stolen laptops and devices. Even though attackers may not be aggressively targeting Mac OS X, Whitehouse urges IT departments to take responsible steps to protect data while it's at rest, and also put systems and policies in place to ensure that any valuable data is backed up.

1 | 2 | 3 |next page »

Comments

Share [+]

TOOLS

Comments

Digg This

SlashDot

CENTER OF EXCELLENCE

Infrastructure

» Outbound Email and Data Loss Prevention
This report shows the findings of a recent Proofpoint and Forrester Consulting study on e-mail security, data loss prevention, and includes statistics on electronic risks.

» A Modern Approach to On-Demand Email and Data Security
Learn how Proofpoint delivers a dedicated, hosted e-mail security solution that combines state-of-the-art anti-spam and virus control.

» A Proactive Approach to e-Discovery
Learn about the key e-discovery challenges facing legal and IT departments today and how businesses can develop an e-mail archiving strategy to deal with e-discovery requests.

» The Advantages of Identity Based Encryption
Download this paper to learn why e-mail encyrption is critical to an organization's overall security architecture and the advantages of identity-based encryption.

» Global Best Practices in Email Security, Privacy and Compliance
This whitepaper discusses the latest global regulations that impact the e-mail security policies and strategies of today's enterprises, universities and government organizations.

Center sponsored by