Symantec：防毒软体已死，未来重心将落在「受骇」的损害控制部分

连先驱 Symantec 都对防毒软体这块市场的发展不抱任何发展期待了，这到底是怎么回事？该公司资深副总裁 Brian Dye 在一次访问中提及，包括自家的 Norton 现有防毒软体都终将走向「死亡」。原因，是因为以往可以有效保护使用者远离病毒与恶意软体侵袭的防毒软体，其实现在真正有效挡下的部分已经不到一半了（正确地说，是仅剩 45%）；也因此，对骇客而言，要入侵一部个人甚至是企业的电脑都已非难事，所以现在的防范措施都已经逐渐由完全防堵，转至将伤害减至最小的「损害控制」。

不过尽管需要转型，事实上我们仍然需要俱有找出并且终结 malware 恶意软体的软体技术，才能相辅相成地解决「受骇」问题 -- 而从财务方面看的话，毕竟 Norton 的收益还是占了该公司的 40%，所以短期内 Symantec，应该还是不会轻易放弃这方面的产品才是，更别说损害控管是针对大企业的服务，咱们个人还是要靠防毒软体还有良好的使用习惯才能远离病毒...

是说，我们也不是每天可以见到还在经营本业的人说自己的产业已死的，但真要没了防毒软体相信对很多人而言还是会很没安全感的吧？-- 即便明知它的效益不彰，却还是需要它...（总觉得好像有点悲哀啊～叹）


转载engadget(中文版)

英文全文(PCWorld):

Antivirus is dead.
So sayeth Brian Dye, Symantec's senior vice president for information security, in a weekend interview with The Wall Street Journal. The words sound shocking—Symantec and its Norton antivirus suite have been at the forefront of PC security for years and years. But don't let the stark claim fool you: Norton isn't being retired, and Dye's words merely reflect the new reality in computing protection.
While detecting and protecting against malicious software installed on your computer still plays a very vital role, many of the sophisticated attacks of today still manage to penetrate PCs with antivirus programs installed. In fact, Dye told WSJ that he estimates traditional antivirus detects a mere 45 percent of all attacks. That's not good.
Making matters more difficult—and driving the point home even further—security provider FireEye says that 82 percent of all malware it detects stays active for a mere hour, and 70 percent of all threats only surface once, as malware authors rapidly change their software to skirt detection from traditional antivirus solutions. "The function signature-based AV serves has become more akin to ghost hunting than threat detection and prevention," the firm says, though it should be noted that FireEye sells active defense IT security services.