Don't forget training costs, and lack of productivity til everyone is up to speed.

One thing, saying Microsoft is horrible security wise is just an out. I do not want to start a flame war over microsoft vrs linux, godzilla, or the lockness monster, but consider this, no operating system is secure out of the box. Most security vulnerabilities happen due to poor configs. How many worm spreads would be stopped with personal firewalls, AV, etc, etc.

Also, a big thing, look at it from the virus writer's perspective. Every OS has vulnerabilities, as well as ID10T users who are easily social engineered. If I were writing a virus/trojan to scam someone out of money, gain their email password, etc, etc, would it make sense for me to target 10% of the systems out there, especially when that 10%, say linux users for example, tend to be more savy about systems and would spot it quickly? No. Hit the masses. Even if all Microsoft users were well educated, you are more likely to find a great target due to not paying attention. Weakness in numbers.

P.S. Realize this is not ment as a pro-microsoft, anit-linux/mac, whatever, it is mearly stating why people target those systems, and it is based off of numbers.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/263/28286#28286