You are here: Home » PTI Stories » National » News
Business Standard

Security software can put computers at risk: study

Press Trust of India  |  Toronto 

Is the antivirus programme running on your computer really making your computers safer to use, say for online banking? New research shows security software might actually make online computing less safe.

Researchers examined 14 commonly used software programmes that claim to make computers safer by protecting data, blocking out viruses or shielding users from questionable content on the internet.

They found that these programmes were doing more harm than good.

"Out of the products we analysed, we found that all of them lower the level of security normally provided by current browsers, and often bring serious security vulnerabilities," said Xavier de Carne de Carnavalet from Concordia University in Canada.

"While a couple of fishy ad-related products were known to behave badly in the same set-up, it was stunning to observe that products intended to bring security and safety to users can fail as badly," said de Carnavalet.

At the root of the problem is how security applications act as gatekeepers, filtering dangerous or unwanted elements by inspecting secure web pages before they reach the browser, researchers said.

Normally, browsers themselves have to check the certificate delivered by a website, and verify that it has been issued by a proper entity, called a Certification Authority (CA).

But security products make the computer "think" that they are themselves a fully entitled CA, thus allowing them to fool browsers into trusting any certificate issued by the products, researchers said.

The findings have important implications not only for everyday computer users, but also for the companies producing the software programmes themselves, they said.

"We reported our findings to the respective vendors so they can fix their products. Not all of them have responded yet, but we hope to bring their attention to these issues," said Mohammad Mannan from Concordia University.

"We also hope that our work will bring more awareness among users when choosing a security suite or software to protect their children's online activities," added de Carnavalet.

He cautioned that internet users should not view these security products as a panacea.

"We encourage consumers to keep their browser, operating system and other applications up-to-date, so that they benefit from the latest security patches," said de Carnavalet.

"Parental control apps exist that do not interfere with secure content, but merely block websites by their domain name, which is probably effective enough," he added.

Dear Reader,


Business Standard has always strived hard to provide up-to-date information and commentary on developments that are of interest to you and have wider political and economic implications for the country and the world. Your encouragement and constant feedback on how to improve our offering have only made our resolve and commitment to these ideals stronger. Even during these difficult times arising out of Covid-19, we continue to remain committed to keeping you informed and updated with credible news, authoritative views and incisive commentary on topical issues of relevance.
We, however, have a request.

As we battle the economic impact of the pandemic, we need your support even more, so that we can continue to offer you more quality content. Our subscription model has seen an encouraging response from many of you, who have subscribed to our online content. More subscription to our online content can only help us achieve the goals of offering you even better and more relevant content. We believe in free, fair and credible journalism. Your support through more subscriptions can help us practise the journalism to which we are committed.

Support quality journalism and subscribe to Business Standard.

Digital Editor

First Published: Thu, May 05 2016. 14:42 IST
RECOMMENDED FOR YOU