News

Unpatched PC "Survival Time" Just 16 Minutes

The average unpatched Windows PC lasts less than 20 minutes on the Internet before it's compromised, according to data from the Internet Storm Center.

The average unpatched Windows PC lasts less than 20 minutes on the Internet before it's compromised, according to data from the Internet Storm Center.


More Insights

Webcasts

More >>

White Papers

More >>

Reports

More >>

Part of the SANS Institute, the Storm Center calculated the average "lifespan" of an unpatched, unprotected PC by listening to IP addresses and tallying the number of probes run against them.

"If you are assuming that most of these reports are generated by worms that attempt to propagate, an unpatched system would be infected by such a probe," the Storm Center said in a statement.

In June 2003, the "survival time" of an unpatched PC was approximately 40 minutes. As of Wednesday, the average was less than half that: only 16 minutes.

Some systems, naturally, will have longer or shorter life spans. Users whose ISPs block ports typically used by popular worms report a much longer survival time, said the Center, while users of high-speed services are often specifically targeted by bot networks sniffing for broadband-connected PCs to compromise and turn into spam or denial-of-service platforms.

"The main issue here is of course that the time to download critical patches will exceed this survival time," said the Internet Storm Center.

The under-20 minute period isn't long enough to pull down major updates, such as Windows XP Service Pack 2 (SP2), acknowledged Joe Wilcox, an analyst with Jupiter Research, in an online posting.

Wilcox recommended reading the Internet Storm Center's guide, "Windows XP: Surviving the First Day," which details how to enable Windows' firewall before connecting to the Internet.

"Don't connect an unpatched PC to the Internet without enabling some kind of firewall," Wilcox wrote. "For some consumers and small businesses without technical know-how, the only option might be patching the system via Automatic Update and then running antivirus software to remove any worms or Trojan horses."

Microsoft's Automatic Update started feeding Windows XP Home Edition users the beefy -- more than 80MB -- SP2 update on Wednesday. Users without a third-party firewall can protect their PCs by enabling the integrated firewall within Windows.

Related Reading


Informationweek Discussions

Start the Discussion


InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS

Resource Links