Web Hosting Reviews & Ratings

November 24, 2010

A New Method to Eliminate Vulnerabilities

Many tech-savvy computer users do not trust their software providers to release updates in a timely fashion. These same users have been looking for a method of finding zero-day vulnerabilities in a quicker and more efficient manner. One company has released a product that does just that, Eeye Digital Security.

A zero-day vulnerability is a weakness in a piece of software that has not been patched by the developers. These holes are targets for hackers and attackers that will exploit them for their advantage. The average user relies on Microsoft or Adobe to keep their information safe from these attackers. Unfortunately these major software companies are not the quickest and most reliable at releasing patches.

Eeye Digital Security has created a program to provide the public with information to about zero-day vulnerabilities. Therefore, they have recently launched a new site entitled, Zero Day Tracker which is a way for the computing public to peruse updated lists of zero-day vulnerabilities that are floating around. It also displays those that have been patched in the past. The Eeye website details those vulnerabilities that have already been announced.

Some of the listed information includes:

• Severity of the hole
• Potential impact
• Programs it affects
• Protection guidelines

The CEO of Eeye explained that most major companies do not report their zero-day vulnerabilities. This leaves the public uninformed about the potential damage that could be done by attackers. The website allows for a one-stop shop destination where visitors can find the most recent vulnerabilities and archived information from as far back as November 2005.

Although there are other resources where this information can be found, they are difficult to navigate and not as comprehensive. The Department of Homeland Security’s Vulnerability Database is one of the most commonly used.

As is no surprise, Microsoft is the head of companies that dominate zero-day listings. Although there is the preconceived notion that Apple is resistant to attacks, this is not entirely true. Since the Windows market is in such high use across the globe and attackers have breached that, they could reach into the Apple market and cause havoc.

This is a tool meant to help the public inform the public as well as place pressure on software vendors to be more diligent in recognizing vulnerabilities. This tracker should allow them to take swift action in order to avoid negative publicity.

Tags: zero-day vulnerabilities,  Eeye Digitial Security,  hacker,  attackers,  exploit,  protection guidelines