Microsoft hopes free security means less malware
Robert Lemos, SecurityFocus 2008-11-20

Call it Microsoft's lemonade-from-lemons moment.

On Tuesday, the software giant announced it would stop selling its consumer security service, Windows Live OneCare, at the end of June and re-release a more nimble version of the software as a free download by the end of the 2009. While competitors and analysts have pointed out that the company's service made few inroads in the consumer market since it was offered as a beta three years ago, Microsoft has focused beyond the death of OneCare to its rebirth as a free service codenamed Morro.

Revamping the technology, company representatives say, could help Microsoft inoculate consumers whose Windows systems are most vulnerable to malicious code: Users of older versions of its software, especially in developing nations, where Microsoft is facing a quiet epidemic in infections. In its latest Security Intelligence Report, for example, the company saw the proportion of computers cleaned by its Malicious Software Removal Tool (MSRT) jump by 25 percent to 10 systems cleaned per 1,000 that ran the tool, continuing a steady climb that started in the second half of 2006.

While other factors -- such as adding the ability to detect new malware families -- contributed to the increase, online criminals are still finding it easy to seek out vulnerable PCs, said Amy Barzdukas, senior product director for Microsoft's Online Services and Windows Division.

"Far, far too many consumers are not using or not keeping up to date with malware protection," Barzdukas said. "We want to offer them a core anti-malware solution." Targeting the consumers not currently protected by antivirus and anti-malware software was always the point of Microsoft's foray into the anti-malware market, Barzdukas added.

Microsoft announced Windows Live OneCare as a beta product three years ago, kicking off the security-as-a-service model for consumers. In February 2006, the company announced that it set the final service's subscription price at $49.95 for up to three computers, significantly lowering a household's cost to protect computers. Antivirus firms Symantec, the owner of SecurityFocus, and McAfee soon followed with their own security services.

Yet, OneCare has had trouble winning over consumers, said Arabella Hallawell, research vice president for business intelligence firm Gartner.

"Everyone, including Gartner, thought that Microsoft would pick up some consumer market share, but they didn't," said Hallawell, who covers the security market for Gartner. Instead, consumers have continued to gravitate toward high-end security suites and services, she said.

Security firms confirmed that the trend. McAfee notched 80 percent year-over-year growth in its premium products. Symantec confirmed similar interest in its high-end software and Norton 360 service. Industry estimates of Microsoft's market share never exceeded single digits.

"Customers are more and more aware of the threats in the market and really moving up the line," said Todd Gebhart, executive vice president and general manager for McAfee's Consumer, Mobile and Small Business group.

However, Microsoft's free service, Morro, will aim to secure the computers of users that might not otherwise install security software, Barzdukas said. The company is aiming for the majority of users that do not use anti-malware software or do not have an active subscription.

Microsoft's Security Intelligence Report for the first half of 2008, the most recent data available, found that the Malicious Software Removal Tool (MSRT) ran on nearly 3 billion Windows PCs and cleaned malicious software from almost 24 million systems. And, while their contribution to the whole is small, developing countries such as Afghanistan, Bahrain and Morocco topped the list of nations with the highest rate of infections, with 76, 29 and 28 computers cleaned per 1,000 executions, respectively.

Users in such developing nations are part of the worldwide security problem and a target for the coming tool.

"These consumers aren't being swayed by the number of features in this suite or that suite, as they either can't or won't pay for security protection," Barzdukas said. "Microsoft's shift in strategy is being driven by the need to help these consumers have a more secure computing experience on Windows PCs."

Microsoft's competitors warn no security can be better than a free product, if the free software does not incorporate strong protections.

"I think that a false sense of security is very dangerous," said Rowan Trollope, senior vice president for consumer product for Symantec, the owner of SecurityFocus. "The vast majority of attacks coming onto the system today are through social engineering."

For now, too little is known to guess how Microsoft's Morro will impact worldwide security.

Yet, Microsoft has generated significant interest for its business security solutions and that could help improve the free product, said Gartner's Hallawell. Among medium-sized companies, its Forefront client-side security solution -- and its low cost -- has gained some adherents. The team of malware analysts and programmers for the Forefront product will also support Morro, Microsoft has said.

"A lot of it is going to depend on how consumers keep their systems up-to-date and whether they actually download it," Hallawell said. "But having a free solution from a trusted provider like Microsoft is not a negative thing from a consumer perspective.

If you have tips or insights on this topic, please contact SecurityFocus.


Privacy Statement
Copyright 2006, SecurityFocus