| Is Linux really more secure than Windows? |
Nov. 09, 2005
My colleague Larry Seltzer thinks we may be on the verge of an age of Linux worms that might rival the endless trouble Windows users encounter. Nah. First, none of the trio of vulnerabilities in the luppi worm actually have a thing to do with Linux.
Yes, these worms target Linux systems, but the holes they use to target aren't Linux holes at all. They're Web service script holes.
Saying that this is a Linux problem is like saying that the gaping Macromedia Flash hole is an XP problem.
So long as you don't run a vulnerable application, your system is as secure as ever.
Larry thinks that one reason why Linux systems are, generally speaking, more secure than Windows systems is that Linux users tend to be more aware of basic security practices than Windows users.
I'd have bought that theory a few years ago, but Linux really is getting more popular. As a result, I now know Linux users who'd be no more able to set up a basic firewall with iptables than a Windows user would be.
As a result, there's a growing market for Linux security programs. Just like I always recommend Zone Labs' ZoneAlarm for Windows users, I now recommend new Linux desktop users either get a Linux desktop like Xandros' Xandros 3.0, which comes with a firewall wizard, or, for corporate users, they buy Astaro Corp.'s Security Gateway software (formerly Astaro Security Linux).
At the server level, I've found Windows and Linux administrators to have equivalent levels of skills.
No, the real security difference between Linux and Windows is simply that by design Linux is inherently more secure than Windows.
From the ground up, Linux was designed to be a multi-user, networked operating system. Even now, Windows shows its creaky history as the descendent of a single-user, stand-alone PC operating system.
That gives Windows some strengths that Linux systems don't have. For instance, you can easily copy and paste from almost any Windows application to another. With some Linux applications it's easy to cut and paste between them; with others it's not.
The bad thing about the Windows approach, where everything from the highest level user applications like a Web browser or a word processor is linked to the lowest level of the core operating system, is that almost any vulnerability can be used to attack the entire system.
Why, this Tuesday, three Windows image-rendering flaws have made XP, W2K and 2003 users' PCs vulnerable to takeover attacks. Your Windows PC could be gutted like a fish simply by viewing a rigged image in Outlook, Internet Explorer, or Word.
Yeow!
This is a perfect example of a Windows-only problem. First, even if there were the same holes in three Linux applications, say Thunderbird, Firefox and OpenOffice.org Writer, it still couldn't hammer a Linux system the way it could Windows. Linux simply doesn't have those useful, but dangerous, Windows internal links.
Make no mistake though, while Linux is far more secure than Windows, it is not invulnerable. No operating system is.
Security is a process, not an operating system or a product. It's just that when using Linux, today and tomorrow, you start ahead of the game.
If you found this eWEEK.com article by Steven J. Vaughan-Nichols informative, be sure to check out eWEEK.com's Linux & Open Source Center for the latest open-source news, reviews, and analysis.
Related Stories:
(Click here for further information)
|
|
|
Approaching the Linux Desktop
The purpose of this paper is to help organizations evaluate the Linux desktop against their own enterprise needs and discover what benefits the Linux desktop might bring to their organizations.
Migrating To Linux: Application Challenges and Solutions
Several solutions exist to help organizations migrate in an orderly fashion from Windows to Linux desktops. This paper establishes the characteristics of an ideal cross-platform solution and reviews these alternatives in light of this ideal standard. The paper takes a closer look at the pros and cons of various solutions and outlines the business benefits that can be achieved.
Linux Advantages: Publicly Available Information on Linux Software
This paper offers a brief summary of readily-available Linux information to help businesses sort out this widely misunderstood operating system.
Top 5 Strategies for Managing Linux
Despite continuous evolution in the manageability of Linux, a 2006 survey cited manageability concerns as a top reason why organizations are hesitating to adopt Linux. Levanta believes Linux can be as manageable, if not more so, than other operating systems by following key strategies. These strategic recommendations were developed from experiences in numerous customer environments, both large and small.
Why Choose Novell for Linux?
This paper outlines the benefits of switching to the Linux platform and choosing Novell as a high-performance, enterprise solution.
Enterprise Linux Selection Guide
Considering moving your enterprise to the Linux operating system? Since there are so many similar versions, choosing the right one can be tough. This paper offers a clear process to help you make an informed decision and get the features, support, and cost that are right for your business and technical needs.
Overcoming Challenges in Managing Linux
Levanta has created a new administration model with innovative technology that breaks down the barriers to making the most of Linux systems. This paper will provide an in-depth look at the workings of Levanta’s product, the first Linux appliance of its kind.
SUSE Linux Enterprise 10 for Retail Businesses
Discover why major retailers have switched to SUSE Linux Enterprise Desktop in the back office. SUSE Linux Enterprise Desktop 10 is a low-cost desktop that offers a complete set of productivity applications and interoperates seamlessly with the other Windows, Macintosh and UNIX desktops in your store.
Moving to a Linux Desktop
Migrating from Windows to Linux on the desktop can be a substantial undertaking because it has the potential for touching -- and perhaps disrupting -- every user in your organization. Unlike a data center (server and infrastructure) migration that is largely transparent to users, the cultural and administrative transitions and environment readiness required to support a Linux desktop migration are extensive.
Seven Good Reasons to Exchange Exchange
This paper describes seven compelling reasons why you should switch from Exchange to Scalix.
|
|
|
|
|
news feed
