Mac Security 101

10 Predictions Follow Up, How’d I do?

By Kale Feelhaver

http://www.applemacpunk.com

applemacpunk@cox.net

 

Last year, I made a series of 10 predictions for Mac security in 2007 (see macCompanion, January 2007 issue). I’d like to follow up on these to see how I did.

 

Here is my original list of predictions:

1. The first “real” Mac OS X virus will be released into the wild (many users will have a bad day due to this one).
2. All the major PC anti-virus software vendors will release Mac versions of their software (if they haven’t already).
3. The number of cross-platform worms will increase dramatically (this means worms that will affect Mac OS X and Windows equally).
4. The first exploit that will specifically target Mac OS X through Windows (BootCamp, Parallels, etc.) will be released into the wild.
5. Mac OS X 10.5 Leopard will include more robust firewall/security settings, showing an increasing awareness of Security by Apple.
6. Apple will add a Security division headed by a CSO. This will also result in a Security page/site on Apple.com.
7. More and more security firms will begin using Mac OS X on desktop/laptop systems.
8. The first Darwin-based network appliance will debut in the IT industry.
9. Apple will partner with a software vendor to produce a proprietary technology powered by Mac OS X (ie: Apple/Blackberry Server).
10. Every major Linux-based security tool will be ported to run natively on Mac OS X.

So how did I do? Well, let’s go through the list one by one:

1. True, sort of. This did happen, but it was not nearly as bad as people thought. A handful of people and organizations reported issues, but no widespread damage.
2. True. Sophos, Symantec, McAfee, Computer Associates, and several others are now offering enterprise versions of their anti-virus software for Mac OS X.
3. False. There were a few, but the increase was not dramatic.
4. False. To date this still has not happened.
5. True. This was right on the money.
6. False. This did not happen, and I am very surprised that it didn’t.
7. True. I have seen this trend in the field. More and more security firms are going to Mac OS X. In addition, more and more IT professionals are making the plunge on their home systems. Mac OS X has transitioned from being a graphic designer’s OS of choice, to being an IT geek’s OS of choice.
8. False. As of yet, I have not seen it, but I have heard there are some in the works.
9. True. I think the iPhone covered this.
10. True. I am using Jack, NMap, Nessus, and Metasploit, all running native on my Mac.

That gives me a score of 5 True, 4 False, and 1 semi-True. Not bad for a bunch of predictions, but not great either. I was going to make another list of predictions for 2008, but considering my track record… maybe I should wait. In any case, be proud to be a Mac user, and enjoy 2008.

 

MWSF goodies are right around the corner, and these are great days for Mac OS X. Happy New Year, be cheerful, and stay Mac. J