AV - should companies keep buying it?
-
@DustinB3403 said in AV - should companies keep buying it?:
All of the training in the world won't stop a sophisticated attack. Users are a great way to prevent a lot of the lowly attacks, but attacks from state actors or people who are targeting the business will, eventually be successful.
Same with security products. Even the best ones only stop so much.
-
@Dashrender said in AV - should companies keep buying it?:
@DustinB3403 said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
if it's a zero day - the AV likely won't do squat.
But neither would the user. As a lot of zero day's are all behind the scenes. Or things that are so ingrained in the day to day that a user doing nothing abnormal is exposed via the same process, but because of a malicious actor.
in most spearphishing attacks, the user has to initiate the contact - by clicking a link, etc. So, yes.. training can make the suspicious and possibly prevent them from clicking the link.
True, spearphishing and zero day don't go together, though. A spearphishing attack by definition isn't a zero day.
-
@Dashrender said in AV - should companies keep buying it?:
But - as Scott already said - the idea here isn't to be rid of AV, because Windows comes with a decent AV already included...
It more about it is better to buy the centralized console for AV or instead spend the money on training/update management solution?Exactly, disabling all AV just to prove a point is silly. It really is about which kind of AV makes sense.
-
@scottalanmiller said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
one being that the company actually values educating the company as a whole, not just a chastising of someone for something something wrong/bad/etc.
That could be worded that one expects their employees to be grown ups and the other feels the need to be condescending and treat them like idiots.
It's all perspective.
Well then - I guess most of the world is idiots - because these are things that users just don't know - or at least never even consider until shown/educated on.
-
@Dashrender said in AV - should companies keep buying it?:
Well then - I guess most of the world is idiots
That should fall into the "well duh" category. Of course most of the world is idiots.
-
@scottalanmiller said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
Well then - I guess most of the world is idiots
That should fall into the "well duh" category. Of course most of the world is idiots.
Along this line - the boss wants me to add to my duties - I now get to train our users on how to use a computer as well as how to be security minded. i.e. don't plug in random USB sticks into a computer, etc.
-
@Dashrender said in AV - should companies keep buying it?:
@scottalanmiller said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
Well then - I guess most of the world is idiots
That should fall into the "well duh" category. Of course most of the world is idiots.
Along this line - the boss wants me to add to my duties - I now get to train our users on how to use a computer as well as how to be security minded. i.e. don't plug in random USB sticks into a computer, etc.
Not fun, but a good thing to be doing.
-
@Dashrender said in AV - should companies keep buying it?:
@scottalanmiller said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
Well then - I guess most of the world is idiots
That should fall into the "well duh" category. Of course most of the world is idiots.
Along this line - the boss wants me to add to my duties - I now get to train our users on how to use a computer as well as how to be security minded. i.e. don't plug in random USB sticks into a computer, etc.
Because you are cheaper than KnowB4?
-
@JaredBusch said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
@scottalanmiller said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
Well then - I guess most of the world is idiots
That should fall into the "well duh" category. Of course most of the world is idiots.
Along this line - the boss wants me to add to my duties - I now get to train our users on how to use a computer as well as how to be security minded. i.e. don't plug in random USB sticks into a computer, etc.
Because you are cheaper than KnowB4?
One would assume.
-
@Dashrender said in AV - should companies keep buying it?:
@scottalanmiller said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
Well then - I guess most of the world is idiots
That should fall into the "well duh" category. Of course most of the world is idiots.
Along this line - the boss wants me to add to my duties - I now get to train our users on how to use a computer as well as how to be security minded. i.e. don't plug in random USB sticks into a computer, etc.
You aren't blocking USB drives today?
-
@IRJ said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
@scottalanmiller said in AV - should companies keep buying it?:
@Dashrender said in AV - should companies keep buying it?:
Well then - I guess most of the world is idiots
That should fall into the "well duh" category. Of course most of the world is idiots.
Along this line - the boss wants me to add to my duties - I now get to train our users on how to use a computer as well as how to be security minded. i.e. don't plug in random USB sticks into a computer, etc.
You aren't blocking USB drives today?
nope.
That was just one example.Then there is the need to still use DVDs around here - that one I couldn't block.
