Linked by David Adams on Tue 22nd Jun 2010 16:14 UTC, submitted by sjvn
Thread beginning with comment 431174
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[4]: From the article ...
by nt_jerkface on Wed 23rd Jun 2010 07:01
in reply to "RE[3]: From the article ..."
For example, Google runs a million Linux servers, and Linux runs the London Stock Exchange.
Yet there exists very little malware which targets Linux, despite the high value of many of the target machines.
Yet there exists very little malware which targets Linux, despite the high value of many of the target machines.
That says nothing about what value those websites are to malware writers. It's effort/profit that matters to them, not actual server value.
Malware writers are mostly criminals that want to make a few million and cash out. Trying to break into a Google farm or stock exchange is an extremely difficult and risky proposition.
When there are millions of Windows users that download random crap from p2p networks and keep updates off there is no contest when it comes to which target will provide the best effort/profit ratio.
RE[5]: From the article ...
by lemur2 on Wed 23rd Jun 2010 11:28
in reply to "RE[4]: From the article ..."




Member since:
2007-02-17
Depends on what you mean by a "Linux platform". Linux is dominant in embedded system (e.g. TVs, media players), in mobile devices (e.g. phones, tablets), on many types of server (e.g. NAS, web server, mail server), on netwrok infrastructure devices and on supuercomputers. Linux does not however have a significant presence on desktops (although the exact installed base of Linux here is very difficult to determine). In any event, many of the machines on which Linux does run are high-value targets. For example, Google runs a million Linux servers, and Linux runs the London Stock Exchange.
Yet there exists very little malware which targets Linux, despite the high value of many of the target machines.
So ... how to eveluate? Perhaps the best method is to do a rough "risk assessment" type of approach. Factor in the diversity of Linux systems (versus the monoculture of Windows), the relative scarcity of desktop Linux, the relative difficulty of targetting Linux, the relative lack of threats against Linux compared to the superabundance of threats against Windows, the normal practice on Linux of running as a restricted users, the security of the repository/package manager system of software distribution vs the Windows practice of downloading & installing unsigned binary packages, execute permissions within the filesystem, no media autorun, SELinux, etc, etc ...
A rough estimate could perhaps be calculated that the system of an ordinary user on the Internet running Windows in typical usage patterns would perhaps be 10 million times (10^7) more likely to get a malware infection than the same user running Linux.
Something like that.