Breaking Antivirus Software

In his 2014 44CON presentation Joxean Koret describes as a better approach to ensure that your AV product is running in as isolated environment as possible, rather than being integrated with other business-critical functions. If your AV falls to an attacker, it shouldn’t automatically mean the rest of the network falls with it. Of course this increases the cost, so is not ideal for many smaller businesses.

More information is detailed in his presentation here –

About The Author

Leave a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top