I agree with Filiprino, the OS should be responsible for providing protections from malware even executing, it’s in the best position to do it, and Microsoft should have far more data on what’s messing with their systems than the antivirus vendors do.
The two big security problems:
That malware/viruses can gain execution to do something useful on the OS. The OS can put in all sorts of safe guards and privilege restrictions to minimize data down to a single app (or less). Microsoft needs some SELinux.
That on windows, running something is accomplished the same as opening something or installing something. Just click on it. The windows usage model needs to be changed. Pop-ups warning about malicious programs is a start, but they’d be more secure if they pushed everything into app stores (doesn’t have to be just one) that are secure, trusted applications, so that installing something was a very separate activity from running a program or viewing a document. For backwards compatibility reasons, the windows usage model will change slowly with each windows version, but I expect it will get there eventually.
Article source: http://www.anandtech.com/show/4822/windows-8-malware-protection-detailed
View full post on National Cyber Security » Virus/Malware/Worms