Subscribe to Windows IT Pro

 

Get Newsletters

  • Get the Latest News
  • Product Updates
  • Helpful Tricks
  • Productivity Tips

Subscribe Now!

November 04, 2004 12:00 AM

Study: Linux Is Least Secure OS

Windows IT Pro
InstantDoc ID #44398
Rating: (6)

According to a study the British security firm mi2g, Linux is the world's "most breached" OS and is exploited more frequently than Windows. The company recently analyzed more than 235,000 successful attacks against computers that were permanently connected to the Internet during the past year and concluded that Linux was responsible for most of the successful exploits.
  
"For how long can the truth remain hidden, that the great emperors of the software industry are wearing no clothes fit for the fluid environment in which computing takes place, where new threats manifest every hour of every day?" DK Matai, mi2g's executive chairman, said in a statement. "Busy professionals ... don't have the time to cope with umpteen flavors of Linux or to wait for Microsoft's Longhorn when Windows XP has proved to be a stumbling block in some well-chronicled instances."
  
According to mi2g, Linux-based computers accounted for more than 65 percent of all successful electronic attacks during the past year, whereas Windows-based systems were responsible for only 25 percent. Attacks against Berkeley Software Distribution (BSD)-based systems were successful less than 5 percent of the time. However, it's worth noting--although mi2g didn't--that BSD-based machines make up a small percentage of the installed base of permanently connected machines. In all probability, those machines weren't attacked simply because there was little incentive to do so, not because of any inherent superiority over Linux- or Windows-based systems.
   
The mi2g study also analyzed the impact of malware during the same time period and found that most malware attacks--about 60 percent--successfully targeted small businesses, whereas about 33 percent successfully targeted home users. Only 6 percent of malware attacks successfully targeted midsized businesses, whereas 2.5 percent successfully targeted enterprises, government agencies, and similar firms. According to the company, 459 successful malware attacks occurred during the past year, most of which targeted Windows-based systems. Malware rarely targeted BSD-based and Linux systems.
  
These electronic attacks are taking an economic toll. The firm says that electronic attacks such as Distributed Denial of Service (DDoS) attacks caused as much as $123 billion in damages during the past year. Malware attacks were responsible for $202 billion in damages during the same time period.

Related Content:

ARTICLE TOOLS

Comments
  • NthDegree
    6 years ago
    Jul 01, 2006

    My current system is Fedora Core + CentOS with Windows inside a secure Virtual Machine.

    I am a regular home user but here's my views, if you have common sense you will not get viruses or *EVER GET HACKED*.

    I have seen what others are talking about where viruses come out of nowhere, it only happens on a fresh 98/2000/XP install from an *original CD without any patches* and without a *hardware* firewall - people in that situation should use their brains and update their CDs.

    On my PC I have never got a virus, and anyone who says that a secured Windows PC gets viruses out of nowhere is spreading FUD.

    I have never had problems because removing the unnecessary cr@p that is (useless for home users) included with both Linux and Windows and hardening system permissions makes everything more secure.

    The issue with Linux security is too many people are using systems like Ubuntu or SuSE OSS for servers and believing they are secure out-of-the-box for a server.

    Who would use Windows XP SP2 for a server no-one would, because it isn't built to be used on a server.

    I believe more people know how to use Windows (obviously, common sense right?) which means less people know how to use Linux properly (again, common sense).

    So therefore more people are going to know all the precautions to take with windows (disable 3/4 of it's services, put on antivirus & firewall, fix sh!t file system permissions, login as limited account etc.)

    Less people will know what to do on Linux (check for updates constantly, setup all server bits in a chroot etc.)

    Each system has problems if you know what the problems are and use the built-in security each OS has you will be OK.

    It's a matter of intelligence and mi2g obviously has none.

    Sorry for the long post but you all sound like you either back Linux or Windows.

    P.S When someone says Slackware vs Windows 2000 that is a fair contest because Windows 2000 still gets security updates making it as up to date as Slackware with regards to security.

  • Anonymous User
    7 years ago
    Jun 16, 2005

    I'm on the fence with this issue. I've admistrated RedHat for years as well as Windows and found that Linux is often broken into but ONLY when you don't keep on top of security updates. With the new RedHat Network it's rare that a common hacker will find a threat that hasn't been automatically patched. At my current job all of our Windows servers are behind firewalls while our Linux servers are the ones out in the DMZ or on the net all alone (with IPChains or IPTables running). Our Windows web servers go through a firewall as well.

    I'd say that Linux is easier to break into if you don't do your homework but for me the biggest reason I prefer Linux for internet servers is becuase it's so much more flexible, faster and cheaper than windows.

    Linux can be secure and so can Windows but so many people don't do their work and somehow expect that the OS will do it for them - those are the ones who get burned.

    I've run RedHat 7.2 (yeah 7.2) on a crap laptop in my home for five years on DSL - I don't even patch the thing because it's just a little junk server - no one ever touches it becuase it's got a firewall something a lot of home users won't do.

    I don't believe these reports much because MS obviously scared of Linux and putting lots of money into making it look bad. I've used Mac OS X and found it to be the wave of the future and MS is terrified of it all linux ports.

  • Anonymous User
    7 years ago
    Apr 13, 2005

    I use XP and have tried some linux distros that have disappointed me. Now I run mainly FreeBSD on a desktop and I would say it's just so GOOD. End to the endless package havoc and numerous XP reboots.

    But lets talk about statistics. It is science anyway, so stop with the stupid jokes about it! It's not so hard to calculate the real percantege of how often the different OS's get hacked. Using the Bayes' theorem it's easy to calculate the posteriori probability a hacked system to be win/lin/bsd/mac/etc.
    All the data needed is:
    how spread an OS is. (example lin=60%, win=30%, bsd=4%, misc=6%)

    What would be harder to find is how many machines running certain OS get hacked/breached/etc. For example of 10,000 linux servers worldwide, 4500 got hacked in a period of time, which is 45%.

    Being provided with this data, everyone can calculate more realistic numbers, and not the obviously misinterpreted results from mi2g.

    Another way to measure the stability of an OS is to compare it longest running times. If a system has been running for 2.5 years, doesn't that speaks for it stability? Of course it could have been hacked but the attacke wasn't able to break the system down. Think about it!
    Go check this: http://uptime.netcraft.com/up/today/top.avg.html

  • Anonymous User
    7 years ago
    Feb 06, 2005

    To add abit more from my post above where I said:

    "wow... ever think Linux is more exposed to attacks because it is used more??

    Alot more servers are linux than they are windows."


    I'm no programmer but give me a break. Welcome to the frikin spin zone.

    Cpanel which has been the most used web control panel on the internet doesn't have a windows platform; only BSD and Linux... so go figure.

    That's like saying "My city has the least crime in the world!" And leaving out: Population 52

    A better example is this post below from November by greglara:

    ******************************************



    C'mon, let's anylize this information realistically here. The majority of "permanently connected" systems are what? Web servers, right? So, Linux in this context is the largest attack surface, the frontline if you will, so they will inevitably be the hardest hit. Then you notice that medium and large businesses are the least hit. That's because they have people who know what they're doing. I can't tell you how many times I've gone to a site to see the default Apache "congratulations" page come up. I'm not a hacker, but that is basically a welcome mat that says "hey, come on in, the door's open."

    So, it's not the OS that's to blame here, it's the people who don't know what they're doing.

    Everybody and their mother knows that Windows is vulnerable, and, without having read the report, I'd guess that those malware attacks that caused "$202 billion in damages" were primarily directed against the Windows systems.

    I too am sorry to see this spun in such a way to try and make Windows look more secure than Linux.


    greglara -November 04, 2004

  • Anonymous User
    7 years ago
    Feb 06, 2005

    wow... ever think Linux is more exposed to attacks because it is used more??

    Alot more servers are linux than they are windows.

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

White Papers

Get your Windows 7 deployment off to the right start by implementing PC lockdown. A locked-down environment is easier and cheaper to support since users are less likely to make unnecessary changes to the core system configuration - read more here!

Essential Guides

Is your iSCSI "lossy"? The reality is that most off-the-shelf Ethernet hardware deployed for iSCSI can lose packets, resulting in slow performance or application downtime. Learn how to assess your current iSCSI infrastructure and engineer an advanced iSCSI SAN infrastructure.

Web Seminars

What's the best way to keep your network safe from malware? In this web seminar, security expert Greg Shields suggests an alternative method to the traditional blacklisting approach that is common with anti-virus and anti-malware solutions.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.