One of the great ironies of infosecurity is that almost every organization uses AV, yet viruses and worms continue to wipe us out.

When you bring this to the attention of the antivirus vendors, they'll calmly explain that no security tool is 100 percent effective, and that as important as AV scanning is, it's only one part of a larger strategy for combating malcode. Fair enough. But whether there are gaps in the technology or gaps in enterprise strategy or gaps in both, this much is clear: whatever we're doing to fight viruses isn't enough.

[ Read more ]

Comment:

This is one of the parts of the cover story for May 2002 Edition of Information Security Magazine.