Symantec: Microsoft security lacks innovation

By Tom Espiner, ZDNet UK
Thursday, June 14, 2007 07:28 AM

Symantec has severely criticized Microsoft's security efforts while launching Symantec Endpoint Protection 11.0, previously codenamed Hamlet.

John Thompson, chief executive of Symantec, told ZDNet UK that Microsoft lacked innovation in devising security products. "Innovation that comes from Microsoft has slowed. Microsoft imitates what others are already doing in the industry," said Thompson.

Symantec made these comments on Wednesday, with the launch of Symantec Endpoint Protection 11.0, which aims to "enforce compliance all the way down to the individual endpoint". The product will come with presets for network-access control, as well as antivirus, firewall and intrusion prevention, while also employing behavioral analysis to help mitigate zero-day threats, the company said.

Endpoint Protection 11.0 is designed to integrate with Altiris security management, with the aim of giving a single security management console to enforce security policy in a heterogeneous systems environment. Symantec completed the acquisition of Altiris on April 9.

Microsoft last week announced a project, codenamed Stirling, rumored to be delivered in 2009, that will similarly allow IT managers to make sure individual devices and users within a heterogeneous network are following security policy. Currently, Microsoft Forefront and Microsoft System Center enforce policy across Microsoft environments only.

"Stirling will provide customers with one security product and one management console to protect and manage security across the entire infrastructure," Microsoft's Margaret Dawson, group product manager for security and access product marketing, said in a statement. "With Stirling, Microsoft becomes the first vendor to develop a single security product that integrates comprehensive protection technologies across client, server and network edge with unified security management, configuration and reporting."

Guy Butterfield, the group president of Symantec's Altiris division, said that Microsoft is "late to the dance".

"Stirling is designed to converge security and operations management by the end of 2009. All Altiris technology runs on common architectures--we're doing that today," Butterfield said. "Microsoft is validating what Symantec is already doing, [but] Microsoft is late to the dance," Butterfield added.

John Thompson also told ZDNet UK that Microsoft was behind the curve, not only with Stirling, but also with Forefront, Microsoft's enterprise security product. "Microsoft innovation has slowed. Stirling is an example of that, and Forefront is an example of that," Thompson said.

Forefront was criticized by the Symantec chief executive for not having a track record of detecting new threats. "If Microsoft was breaking the mold in innovative thinking, it would have made advances in detecting new threats. Microsoft got VB100 certification for the first time last week; we pride ourselves on getting it 31 consecutive times. We applaud what Microsoft is trying to do in security, but we don't think the public should be duped by their marketing," said Thompson.

To get VB100 certification, antivirus products must detect 100 percent of in-the-wild exploits on the Virus Bulletin database.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Cost and graphics concerns delay a VDI project

Tech Management

Virtual desktops are a serious paradigm shift and Scott Lowe is taking it in a slow and measured way. In this article, he provides an update on ongoing VDI efforts at Westminster College.


Read more »



Do we need more delivery centers?

Blog thumbnail

As I wrote a while back in about "racing to subsidies", there certainly is an increased focus by governments to attract delivery centers to their region. To do that, many..... by Michael Rehkopf

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web