Welcome!

@CloudExpo Authors: Yeshim Deniz, Elizabeth White, Liz McMillan, Zakia Bouachraoui, Pat Romanski

Related Topics: @CloudExpo, Cloud Security

@CloudExpo: Blog Post

Why Cloud Anti-Virus Engines Are Critical in the Fight Against Malware | @CloudExpo #Cloud

Anti-virus on cloud: how this migration is changing the way computer security works

The next few years could see a paradigm shift in the way anti-virus applications work. A number of businesses have migrated from traditional desktop based anti-virus packages to "lighter" software apps that process desktop security from the cloud. At the outset, this change is not entirely apparent - end users will still need to install software on their local desktop systems. However, the processing of information is now getting ported to the cloud.

What exactly is driving this change? There are primarily two reasons to this. Firstly, internet connectivity is getting faster and more ubiquitous, at least in the west. Secondly, the number of new malware is on the rise. According to a recent report from Symantec, nearly one million new malware threats get released every single day. This means that in the time it took you to read this paragraph, at least a hundred new threats were released.

Anti-virus applications typically work by scanning files on your computer and benchmarking them against "virus definitions" that are stored in their database. This directory of virus definitions is periodically updated in order for the program to effectively block every new threat on the horizon. But with billions of threats released every year, it is simply not possible to house all of these definitions on your local desktop computer. Not only does this require a lot of hardware resources, but it also consumes a lot of processor power. This clearly has a massive impact on a user's experience.

At the same time, advances in distributed computer network systems in the past few years have made it possible for big data processes to be carried out efficiently through the cloud. Thus, a cloud antivirus program is an intelligent way to counter the challenges in local desktop-based software with an alternative that can be processed faster over the cloud.

How does this work? Despite the term, cloud antivirus systems will still require the user to install a local application on their computer to protect from various threats that come in the form of file attachments, browser plug-ins, and extensions. However, instead of updating the virus definitions on your local desktop periodically, this software application will instead only host a smaller cache of the most common virus threats.

This serves as a contingency alternative when the anti-virus software cannot reach out to the cloud for processing. Since the main application is hosted on the cloud, it is possible for the system to be continually updated with the latest definitions in real-time. There is little scope for a malware to get through when it is evaluated with a database of threats updated to the minute.

The cloud anti-virus is not without its share of challenges though. One of the most important concerns is with regards to the effectiveness of the process. Traditional antivirus engines evaluate a suspect file over multiple layers like entry vector, file system and execution. In each of these layers, the file is scanned by multiple systems concerning the anti-virus signature, rules, heuristics, etc. However such detailed analysis, albeit redundant, may not be possible with cloud antivirus engines due to bandwidth constraints. A lot of the present day cloud antivirus engines compare the metadata of the files with those in their virus dictionary to identify potential threats. While they may still be as effective, it remains to be seen if they can continue to perform as well as desktop antivirus software.

The next decade will see enormous changes not just in the way antivirus applications work, but also in the way threats arrive. While a cloud-based system is definitely the future, any chinks in the armor need to be repaired before it is too late. What are your thoughts?

More Stories By Harry Trott

Harry Trott is an IT consultant from Perth, WA. He is currently working on a long term project in Bangalore, India. Harry has over 7 years of work experience on cloud and networking based projects. He is also working on a SaaS based startup which is currently in stealth mode.

CloudEXPO Stories
Technology has changed tremendously in the last 20 years. From onion architectures to APIs to microservices to cloud and containers, the technology artifacts shipped by teams has changed. And that's not all - roles have changed too. Functional silos have been replaced by cross-functional teams, the skill sets people need to have has been redefined and the tools and approaches for how software is developed and delivered has transformed. When we move from highly defined rigid roles and systems to more fluid ones, we gain agility at the cost of control. But where do we want to keep control? How do we take advantage of all these new changes without losing the ability to efficiently develop and ship great software? And how should program and project managers adapt?
Even if your IT and support staff are well versed in agility and cloud technologies, it can be an uphill battle to establish a DevOps style culture - one where continuous improvement of both products and service delivery is expected and respected and all departments work together throughout a client or service engagement. As a service-oriented provider of cloud and data center technology, Green House Data sought to create more of a culture of innovation and continuous improvement, from our helpdesk on to our product development and cloud service teams. Learn how the Chief Executive team helped guide managers and staff towards this goal with metrics to measure progress, staff hiring or realignment, and new technologies and certifications.
When Enterprises started adopting Hadoop-based Big Data environments over the last ten years, they were mainly on-premise deployments. Organizations would spin up and manage large Hadoop clusters, where they would funnel exabytes or petabytes of unstructured data.However, over the last few years the economics of maintaining this enormous infrastructure compared with the elastic scalability of viable cloud options has changed this equation. The growth of cloud storage, cloud-managed big data environments, and cloud data warehouses like Snowflake, Redshift, BigQuery and Azure SQL DW, have given the cloud its own gravity - pulling data from existing environments. In this presentation we will discuss this transition, describe the challenges and solutions for creating the data flows necessary to move to cloud analytics, and provide real-world use-cases and benefits obtained through adop...
Docker and Kubernetes are key elements of modern cloud native deployment automations. After building your microservices, common practice is to create docker images and create YAML files to automate the deployment with Docker and Kubernetes. Writing these YAMLs, Dockerfile descriptors are really painful and error prone.Ballerina is a new cloud-native programing language which understands the architecture around it - the compiler is environment aware of microservices directly deployable into infrastructures like Docker and Kubernetes.
Your applications have evolved, your computing needs are changing, and your servers have become more and more dense. But your data center hasn't changed so you can't get the benefits of cheaper, better, smaller, faster... until now. Colovore is Silicon Valley's premier provider of high-density colocation solutions that are a perfect fit for companies operating modern, high-performance hardware. No other Bay Area colo provider can match our density, operating efficiency, and ease of scalability.