Trend's cloud

My Trend is due to expire, went to Trend's site, and now they have
Trend Micro Titanium which uses “cloud technology”

Has anyone used this, or know how it works?

From what I can gather everything you do will first be looked at by their cloud before it reaches your computer.
But doesn't this just make them a man-in-the-middle ?

So ALL my bandwidth goes through them first?

Does anyone else have a problem with this, or is it just me?

They say it speeds things up because you don't have to constantly download file patterns, etc., and you use less space on your hard drive. But then how do they tell if a file you downloaded two weeks ago ( which they didn't know about ) and now wants to run on your computer is malicious ??? Or an e-mail you haven't opened in two years?

It is one thing to trust an AV company, quite another to trust them implicitly.

Ugh.. I am so sick of hearing about cloud computing. Go away and die already. Google docs is AWESOME!!!1! Lets put all of our confidential documents in there so we can collaborate!!! Heaven forbid our ISP bites it, and we lose access for a couple hours... Oh NOES! Or someone clicks a wrong button, and we suddenly have global access to our info. Sorry, I have been dealing with higher-ups that think cloud computing is the best thing since oxygen.

And to trust all of my information flowing through 'cloud technology' -- Not a chance.

Drives me to :drink:

westin, just do what I did when the exec team here wanted cloud computing.

Your hardware may differ but the results are the same.

Two new layer 3 switches.
New SAN. (24 virtual server atm)
Migrate all your old **** to the new VM's (I used M$ cause it's free)

When you report out on your capital expense, title it (or at least list the hardware) "Local Cloud"

Ok to answer your question without getting into the whole "confidential" issue.

I work for Panda Antivirus and we have implemented cloud 'scanning' in all products. We have a fully fledged cloud product called panda endpoint protection where the 'console' is hosted by us versus on your infrastructure.

The way it deals with malware.

Is has a local signature file with generic heuristics and some deep code scanning heuristics. If malware is suspected on a file it will query the cloud via an MD5 checksum which will come back and say goodware or badware.

In my opinion this is great as you have access to our whole database not jsut a 50 megabyte signature file locally on the machine.

YES you will need internet access for this which is one of the drawbacks but I asure you it does work.

And to have such a negative response to the cloud is just naive if I have never seen an answer. Yes dont store CIA docs on there but merely from an AV perspective it is the way of the future.

I will be more than happy to answer any questions or get developers involved here to give you more insight as to what we do.

If you are going to test , give us a try: http://www.pandasecurity.com/enterpr...gedprotection/

This by no means is myself trying to advertise but we are ahead of the game with this. (dont come with your 1970's cloud crap :P).

Quote:

---

Originally Posted by dinowuff

westin, just do what I did when the exec team here wanted cloud computing.

Your hardware may differ but the results are the same.

Two new layer 3 switches.
New SAN. (24 virtual server atm)
Migrate all your old **** to the new VM's (I used M$ cause it's free)

When you report out on your capital expense, title it (or at least list the hardware) "Local Cloud"

---

Haha! I love it! :D

Oh, and cider,

You sound just like those vendors I hang up on. To quote one of my favorite movies:

Quote:

---

Yeah, well, you know, that's just, like, your opinion, man.

---

;)

hmmm, was trying to have a discussion , not a sales pitch.

If you dont do the whole cloud computing please give your thoughts so we can have a discussion?

Fair enough. As noted above, I am not fond of cloud computing. Maybe I am just old fashioned, or maybe I just get sick of hearing about it from my superintendent...

The OP was indicating that all traffic flowed through the AV company before coming to them. If that is the case, then I want no part of it. It sounds like Panda has a different model.

Quote:

---

If malware is suspected on a file it will query the cloud via an MD5 checksum which will come back and say goodware or badware.

---

Which really sounds like an automated version of virustotal.

Hi westin,

Yes it basically is like virus total except VT uses our unix command line engine and not our cloud engine.

We have an email based computing story where mail will flow via us which will be scanned, I dont llike that tbh but scanning your pc and sending the md5 could be useful.

The traditional av works great if you lock your network down but believe me not everyone is like you :P

Quote:

---

The traditional av works great if you lock your network down

---

Yes, I definitely agree with you here. :)

Quote:

---

but believe me not everyone is like you :P

---

That is probably not a bad thing. :D

Quote:

---

but scanning your pc and sending the md5 could be useful.

---

I can see some merit to this, but does it do it behind the scenes, or does it say 'we are sending a report for this file'?

Quote:

---

Quote:
but scanning your pc and sending the md5 could be useful.
I can see some merit to this, but does it do it behind the scenes, or does it say 'we are sending a report for this file'?

---

This would be part of the resident av or a scheduled scan you would do from your management console (in this case it would be your cloud based console hosted by us) and it will solely be done in teh background.

Some digging you will find a process running but no popups for the end user, totally transparent.

Jeez...

Cloud computing (in the sense that Cider is using it has been around forever) Surf Control, Web Sense anybody?

Remote access to applications and software.. Hum let me think.. Yes, yes... I seem to remember I was M$ certified on Windows NT4 Terminal server edition. Oh and CITRIX certified.

The major change that started all this "Cloud SHI7" was the Amazon and RackSpace architecture. Which I love btw. I have a Rackspace account. I run windows 2008 server, M$ SQL 2008 and SharePoint 2010. I am thinking about adding communication server.

Since I am running M$ SQL it cost's me $1.87 per hour to run. The ISP routs all connections through MX Logic (recently purchased by Mcafee - or the other way around) So antivirus is on the proverbial gateway.

I can add memory, processors, disk space as needed when needed. I'm not sure how much storage space I am limited to. There are too many zeros and I don't know what comes after TeraByte. Best thing is I can turn the whole thing off when not in use. I can use the site 6 hours every 3 months or 24X7 They don't care. Pay as you go is the best way for me.

Major applications, Oracle, Microsoft are all "cloud ready" Like I said nothing new, just a new way of doing it. RDP over HTTP for instance.

So for the love of Mike, PLEASE PEOPLE - IT'S THE INTERNET. Clouds are the things floating above us in the sky. Sometimes they're white, sometimes they're not, but they are NEVER, NEVER COMBUTER BASED!

lmao - would you rather it being referred to as a hosted solution. Its nothing fancy , I know its been around for a while but we are talking about the AV sense here, possibly the most critical sense of security besides ACL lists.

Larry explains it better than I can. Pretty much "Cloud Computing" Nothing new here to see.

http://news.cnet.com/8301-13953_3-10052188-80.html

Quote:

---

The computer industry is the only industry that is more fashion-driven than women's fashion. Maybe I'm an idiot, but I have no idea what anyone is talking about. What is it? It's complete gibberish. It's insane. When is this idiocy going to stop?

---

Read more: http://news.cnet.com/8301-13953_3-10...#ixzz10vZSqv6s


hahahahah....great link Dino

....its just rebranding of existing technologies....software as a service.

Reminds me of the dumb WYSE terminals I used to work with.......many many many moons ago! :eek7:

MLF

Quote:

---

And to have such a negative response to the cloud is just naive

---

Really? Name calling?
Well, maybe I am ..... I am an old fart, set in my ways.

But clouds are not new to me: I can not count the number of times over the past few years I have seen “ no response from the cloud server”

And it wasn't unexpected from the AV companies http://www.antionline.com/showpost.p...7&postcount=16
It is that I object to it.

( As westin says, it appears Panda has a little different approach? )

But what happens when I am out at a seminar and they hand us a disk with info on it. Do I wait until I have Internet connection before I can scan it, or just insert and run blindly?

How does the AV cloud handle encrypted traffic that doesn't expand until after it is on my computer? ( no, we haven't seen anything like that before )

The AV companies try to solve a problem without addressing the causes of the problem ( which, in their defense they have little control over. )

But to jump on the bandwagon of the latest buzz phrase and try to convince people it is better for the customer when in reality it is just easier for them to manage ..... wait, does this remind anybody of Web 2.0? It has more features!
Have all the security pitfalls been solved with that yet? MS10-070 OOB Patch for ASP.NET vulnerability (Infocon YELLOW)
( Oops, I digress, couldn't help myself. )

morgan, I spent years sitting at a WYSE terminal, but it was not connected to a server at another company which was out of our control: the server was managed in house.

Quote:

---

... dont store CIA docs on there ...

---

How much extremly confidential information is stored on peoples computers every day, sent through e-mail, etc. What if I receive my orders to ship out via e-mail or pdf? The AV sees it and says, wait, it might have an exploit in it, send it to the cloud? Or it was reviewed by the cloud first. Now somewhere, in some country, a server has information on troop movements of my unit. Shouldn't I have any say about this? Is my government going to ban use of those products by their personnel and their families?

As I read their explination of their cloud, this appears to me to be the closest thing to Big Brother yet!

IKnowNot you bring up very valid points.....I dont like it much myself....to many variables.

MLF

I hear what you are saying but for the average user a SaaS could be also easier for them. Personally I would choose a traditional AV if I were managing it but you wont believe how many companies over here in SA are outsourcing their IT , even the bigger guys are doing it.

I will try and see what exactly Trend does with their solution and come back to you guys.

Quote:

---

Really? Name calling?
Well, maybe I am ..... I am an old fart, set in my ways.

---

Wasnt a direct attack on you mate :-)

In the recent Internet.Com newsletter, there's an interesting .pdf regarding cloud security.

Quote:

---

Security of Cloud Computing Users
Prepared by Dr. Larry Ponemon, 12 May 2010
I. Executive Summary

CA and Ponemon Institute are pleased to present the results of the

Security of Cloud Computing

Users

study. This paper represents the first of a two-part series on security of cloud applications,

infrastructure and platforms. We also have a second study that focuses on cloud computing
providers located in the United States and Europe. This study will be released in the coming
months.
Cloud computing is being heralded as an important trend in information technology throughout
the world. Benefits for business and IT include reducing costs and increasing productivity. The
downside is that many organizations are moving swiftly to the cloud without making sure that the
information they put in the cloud is secure.
The purpose of the study is to learn from IT and IT security practitioners in the US and Europe the
current state of cloud computing security in their organizations and the most significant changes
anticipated by respondents as computing resources migrate from on-premise to the cloud. As
organizations grapple with how to create a secure cloud computing environment, we believe the
findings from this study can provide guidance on how to address business and technology risks
exacerbated by cloud computing. Specifically, in this study cloud computing users evaluate
security technologies and control practices they believe are best deployed either on-premise or in
the cloud. We also asked cloud computing users to rate the types of sensitive or confidential
information too risky to be moved to the cloud.
Cloud computing has been defined as the use of a collection of distributed services, applications,
information and infrastructure comprised of pools of computer, network, information and storage
resources. These components can be rapidly orchestrated, provisioned, implemented and
decommissioned using an on-demand utility-like model of allocation and consumption.

1 Cloud

service delivery models are Software as a Service (SaaS), Platform as a Service (PaaS) and
Infrastructure as a Service (IaaS).
We surveyed 642 and 283 IT practitioners (a.k.a. cloud computing users) located in the US and

Europe, respectively. We queried these individuals about the following topics:

---

http://www.ca.com/files/IndustryRese...ers_235659.pdf

Very Nice HYBR|D, thanks