Comments on: Malware Headlines Make Case for Sandbox

By: Josh Mainer

Josh Mainer — Sat, 30 Jun 2012 23:29:57 +0000

Although IT personnel are often intrigued and are quick to jump on the next-hot-app-out-there, I know some who are complacent and would rather remain using with the limited tools that they have.

It’s true that experience pays. However, sometimes, older IT guys don’t update themselves and fallen into the rut of being an “expert” on things that are no longer relevant, or worse obsolete. That’s why an IT department needs to have a good mix of staff. Some should be experienced, others newbies. Newbies bring on a fresh perspective and attitude on things. And the diversity could bring on a great synergy.

By: Julian Waits

Julian Waits — Fri, 08 Jun 2012 10:53:38 +0000

Ian, I agree with your comments. Here at GFI, we’re building integration modules that allow custom signatures to get imported into vaying perimeter based security products, such as Sourcefire, Qualys, Rapid7, and others. The key issue, in my opinion, is that the SandBox has to be tied into the existing cyber defense architecture.

You obviously understand that AV alone is not the answer. It’s the job of SandBox vendors, like GFI, to demonstrate the value our technology brings to the Enterprise.

By: Dave Hawkins

Dave Hawkins — Thu, 07 Jun 2012 14:23:21 +0000

Anyone who utilizes a test space for patch deployment but does not take the same approach in keeping a sandbox prepared to observe the behavior of malware is being somewhat hypocritical in my view. Granted not every business is going to need to study malware as closely as security industries, but if you have the means, and you’re interested in anticipating potential downtime no matter how it comes about, a sandbox is right for the job.

By: Ian Davis

Ian Davis — Thu, 07 Jun 2012 12:45:24 +0000

Sandbox, as many other really useful technologies might be hard to communicate to senior management and since these are the guys that approve purchases, even if the admin favors the technology, it ends being not used in the enterprise. It might look the sandbox offers little benefit for the money – why get it when we already have antivirus? Try and explain to a manager that this is not the same as an antivirus and that they do different things.