PDA

View Full Version : Windows 7 security experiment


dtugg
20th July 2009, 11:10 PM
I am going to conduct an experiment to see how secure Windows 7 is without any additional software. If it will get infected with malware just by being connected to and surfing the Internet.

Right now I run:

Norton Internet Security 2009. Norton has had a bad rap in the past but the 2009 version is vastly improved and takes very little resources. I'm not the only only who thinks so, it has good reviews everywhere I've seen.

Micosoft Security Essentials, which new, free anti-malware software from Microsoft. It is simple and lightweight, yet very effective. In one test it found and neutralized 100% of 3200 pieces of malware and had a 0% false positive return. It is still in beta and Microsoft isn’t offering offering downloads anymore. It can can still be downloaded from third party mirrors though if anybody is interested (if you need a link let me know).

Those both run in real time protection. I know that it often isn't a good idea to run more than one AV at the same time because they can slow the system down and conflict with each other. But they use virtually no resources and I know for a fact that they still work because I’ve downloaded loads of known malware as a test and they both always catch it. They also both do full system scans weekly. These scans never find anything.

OK, back to my experiment. I turned off both NIS and MSE. I turned Windows Firewall (NIS turned it off) and Windows Defender (MSE turned it off) back on because they are both included with Windows 7 and enabled by default. I also plan on using IE8 exclusively because that is the browser included with Windows 7 (at least everywhere but Europe), plus I've grown to like it.

I'll be using this computer every day for several hours a day and it will be connected to the Internet, with IE running 24/7. I won’t change my browsing habits at all. Just use common sense like not visiting dodgy sites and downloading “codecs” in order to watch some porn or download “antivirus software" because I'm supposedly infected. Of course, I never do this anyway (unless I am trying to download some malware).

Once a week (or if I think that I am infected) I will run a full system scan with both MSE and NIS to see if any malware managed to sneak on my system and I will report back here. Honestly, I doubt that it will get infected at all. I'll probably keep this up until I get infected, so if I am right, that could be indefinitely. If I do get infected it shouldn't be a big deal MSE or NIS should be able to take care of it and if for some reason it can’t, I will restore from an image. I will say that even if I never do get infected, running without active AV software is not a good idea. It’s better to be safe, especially considering that there are good solutions that are free and very light on resources. This is just an experiment to see how secure Windows 7 is out of the box.

jsiv
21st July 2009, 07:10 AM
In all honesty, I don't think it's going to be a very interesting experiment. If you stay away from threats like you've listed, you don't really need anti-virus at all, as the only threat becomes vulnerabilities in the OS or network-enabled applications that can be exploited remotely.

dtugg
21st July 2009, 08:33 AM
Yeah, that’s what I figure. I keep on hearing about how Windows is inherently insecure and how you pretty much WILL get tons of malware just by being connected to the Internet if there is no AV software running. Of course, this is mostly from Mac fanboys who believe everything that Apple tells them. I just want to test it for myself.

Soapy Sam
21st July 2009, 08:56 AM
How do you connect to the internet?
Your router may be running a firewall.
Personally I think this- and sane browsing habits- provides more protection than most anti-malware software.

Ocelot
21st July 2009, 08:56 AM
Should be OK with Windows Firewall on. Especially with a realitively up to date patch level and of courde running Win 7 and IE 8 pretty much guarentees that.

Of course if you connect through a router Windows Firewall might not even be necessary.

Zax63
21st July 2009, 08:57 AM
I won’t change my browsing habits at all.
not visiting dodgy sites and downloading “codecs” in order to watch some porn
Self-contradictory? :D

Actually, I will be very interested in your results. I was always quite skeptical about the "Windows machines will be compromised within 10 minutes of connecting to the internet" type of claim.

dtugg
21st July 2009, 09:06 AM
How do you connect to the internet?
Your router may be running a firewall.
Personally I think this- and sane browsing habits- provides more protection than most anti-malware software.

I'm connected wireless through a router that's also running a firewall.

Ocelot
21st July 2009, 09:40 AM
I think those claims date from testing an unpatched XP box/2000 with a direct connection to the internet.

Rat
21st July 2009, 09:52 AM
Well, certainly you can safely do that with XP or Vista, as I have been for years. I have ClamWin, but it's passive and I rarely use it. Still no viruses yet.

Ocelot
21st July 2009, 10:36 AM
Well, certainly you can safely do that with XP or Vista, as I have been for years. I have ClamWin, but it's passive and I rarely use it. Still no viruses yet.

Unpatched? Directly connected - no router?

GreNME
21st July 2009, 10:40 AM
You can always DMZ it. I've done that for some testing and playing around with a honeypot before.

Rat
21st July 2009, 10:57 AM
Unpatched? Directly connected - no router?
No, sorry, I was responding to the OP. I'm aware that I couldn't have done so in XP around 2003 for a while if I were directly connected. I do connect through a router and am nearly always fully patched.