Why are there no standards for PC security?

Question

I recently installed Zone Alarm as a firewall. It's free and so far I like it. The concept is great. The only problem I see with it is that it asks the user too many questions. Most of us, me included, guess at who to allow into the protected areas of our computers. If all I had to do was to tell Zone Alarm or any other firewall who I wanted updates and communications from, with standards this all could be done automatically ... taking the weak link , the user, out of the decision making. For example, I get updates from people who should know that they should sign their software with a digital signature, so firewalls (and everyone else) would know it can be trusted. That's why I think there should be security standards. Wouldn't it make sense to let firewalls and trusted websites communicate between themselves and leave the users out of these confusing decisions? At least as much as possible.Thanks.

Answer 1

Not really, that would be pretty daft. Oh, I'll digitally sign my Microsoft virus - great there you go. These "standards" would lead to chaos.

Answer 2

Freedom of choice.  That is pretty much what the internet experience is all about.  In such a maverick environment it is extremely challenging to do much policing.  Products like Zone alarm and Comodo Pro are asking the questions of you, the user.

It takes some time for the Firewall program to get some sense of your browsing habits on the internet.  There is so much malware floating around on the internet it does not make sense to not let the program build a set of rules to help protect YOUR internet experience.

The CERT experts are saying that an unprotected new PC, with no Windows updates, no anti-virus, no anti-adware/spyware programs running will be infected in less than 15 minutes after being connected to the internet.  Doesn't this fact scare you a bit?  I am an IT professional and it makes me squirm and a bit nervous.  What new internet exploit will be out there tomorrow when I get to the office?

Firewall software by itself is not enough.  There is a lot of malware coming through the TCP/IP port 80 that most browsers are using for internet traffic.  It takes layers of protection to guard the LAN's of businesses around the world.

Answer 3

because antivirus programmer release the viruses so people will buy their software lol

Answer 4

If there were *known* standards, then those standards would be written down somewhere, and if they were written down, then someone would be able to get a copy, and since not *all* people are trustworthy, someone who is *not* trustworthy would get a copy and pass it on to someone else who is *not* trustworthy and use the published standards for manners in which they are not intended to be used (i.e., in order to get around them and harm your computer).

Therefore, standards that vary, and are unpredictable, serve to keep the "unscrupulous" malware writers from having such an easy task when trying to harm your computer or find your precious personal information.