Welcome!

@CloudExpo Authors: Courtney Abud, Elizabeth White, Carmen Gonzalez, Pat Romanski, Liz McMillan

Related Topics: @CloudExpo, Cloud Security

@CloudExpo: Blog Post

Why Cloud Anti-Virus Engines Are Critical in the Fight Against Malware | @CloudExpo #Cloud

Anti-virus on cloud: how this migration is changing the way computer security works

The next few years could see a paradigm shift in the way anti-virus applications work. A number of businesses have migrated from traditional desktop based anti-virus packages to "lighter" software apps that process desktop security from the cloud. At the outset, this change is not entirely apparent - end users will still need to install software on their local desktop systems. However, the processing of information is now getting ported to the cloud.

What exactly is driving this change? There are primarily two reasons to this. Firstly, internet connectivity is getting faster and more ubiquitous, at least in the west. Secondly, the number of new malware is on the rise. According to a recent report from Symantec, nearly one million new malware threats get released every single day. This means that in the time it took you to read this paragraph, at least a hundred new threats were released.

Anti-virus applications typically work by scanning files on your computer and benchmarking them against "virus definitions" that are stored in their database. This directory of virus definitions is periodically updated in order for the program to effectively block every new threat on the horizon. But with billions of threats released every year, it is simply not possible to house all of these definitions on your local desktop computer. Not only does this require a lot of hardware resources, but it also consumes a lot of processor power. This clearly has a massive impact on a user's experience.

At the same time, advances in distributed computer network systems in the past few years have made it possible for big data processes to be carried out efficiently through the cloud. Thus, a cloud antivirus program is an intelligent way to counter the challenges in local desktop-based software with an alternative that can be processed faster over the cloud.

How does this work? Despite the term, cloud antivirus systems will still require the user to install a local application on their computer to protect from various threats that come in the form of file attachments, browser plug-ins, and extensions. However, instead of updating the virus definitions on your local desktop periodically, this software application will instead only host a smaller cache of the most common virus threats.

This serves as a contingency alternative when the anti-virus software cannot reach out to the cloud for processing. Since the main application is hosted on the cloud, it is possible for the system to be continually updated with the latest definitions in real-time. There is little scope for a malware to get through when it is evaluated with a database of threats updated to the minute.

The cloud anti-virus is not without its share of challenges though. One of the most important concerns is with regards to the effectiveness of the process. Traditional antivirus engines evaluate a suspect file over multiple layers like entry vector, file system and execution. In each of these layers, the file is scanned by multiple systems concerning the anti-virus signature, rules, heuristics, etc. However such detailed analysis, albeit redundant, may not be possible with cloud antivirus engines due to bandwidth constraints. A lot of the present day cloud antivirus engines compare the metadata of the files with those in their virus dictionary to identify potential threats. While they may still be as effective, it remains to be seen if they can continue to perform as well as desktop antivirus software.

The next decade will see enormous changes not just in the way antivirus applications work, but also in the way threats arrive. While a cloud-based system is definitely the future, any chinks in the armor need to be repaired before it is too late. What are your thoughts?

More Stories By Harry Trott

Harry Trott is an IT consultant from Perth, WA. He is currently working on a long term project in Bangalore, India. Harry has over 7 years of work experience on cloud and networking based projects. He is also working on a SaaS based startup which is currently in stealth mode.

CloudEXPO Stories
Where many organizations get into trouble, however, is that they try to have a broad and deep knowledge in each of these areas. This is a huge blow to an organization's productivity. By automating or outsourcing some of these pieces, such as databases, infrastructure, and networks, your team can instead focus on development, testing, and deployment. Further, organizations that focus their attention on these areas can eventually move to a test-driven development structure that condenses several long phases into a faster, more efficient process. This methodology has a name, of course: Continuous delivery. As Jones pointed out at CloudEXPO, continuous delivery allows developers to trim the fat off tasks and gives them more time to focus on the individual parts of the process. But remember-implementing this methodology requires organizations to offload management of databases, infrastruct...
On-premise or off, you have powerful tools available to maximize the value of your infrastructure and you demand more visibility and operational control. Fortunately, data center management tools keep a vigil on memory contestation, power, thermal consumption, server health, and utilization, allowing better control no matter your cloud's shape. In this session, learn how Intel software tools enable real-time monitoring and precise management to lower operational costs and optimize infrastructure for today even as you're forecasting for tomorrow.
As the digitization of business accelerates the move of critical applications and content to the cloud, the network has never been as critical to business success. Consuming everything ‘as-a-service' requires new levels of network automation, agility and security. Discover how Enterprises can take advantage of Digital Platforms, directly connecting to an extensive ecosystem of digital partners and flex their service at the click of a button.
In today's always-on world, customer expectations have changed. Competitive differentiation is delivered through rapid software innovations, the ability to respond to issues quickly and by releasing high-quality code with minimal interruptions. DevOps isn't some far off goal; it's methodologies and practices are a response to this demand. The demand to go faster. The demand for more uptime. The demand to innovate. In this keynote, we will cover the Nutanix Developer Stack. Built from the foundation of software-defined infrastructure, Nutanix has rapidly expanded into full application lifecycle management across any infrastructure or cloud .Join us as we delve into how the Nutanix Developer Stack makes it easy to build hybrid cloud applications by weaving DBaaS, micro segmentation, event driven lifecycle operations, and both financial and cloud governance together into a single unified st...
CloudEXPO has been the M&A capital for Cloud companies for more than a decade with memorable acquisition news stories which came out of CloudEXPO expo floor. DevOpsSUMMIT New York faculty member Greg Bledsoe shared his views on IBM's Red Hat acquisition live from NASDAQ floor. Acquisition news was announced during CloudEXPO New York which took place November 12-13, 2019 in New York City. Our Silicon Valley 2019 schedule will showcase 200 keynotes, sessions, general sessions, power panels, and hands on tutorials presented by 150 rockstar speakers in 10 hottest conference tracks of 2019: