Apple's Security Patch Process Gets Worse While Microsoft's Gets Better - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Software // Enterprise Applications
News
3/31/2008
04:12 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Apple's Security Patch Process Gets Worse While Microsoft's Gets Better

Swiss researchers suggest that the revived popularity of Apple's products may have left the company unable to keep up with security risks.

Apple has been getting worse at dealing with security vulnerabilities while Microsoft has been getting better, according to a research paper published by Swiss security researchers.

In "0-Day Patch Exposing Vendors (In)security Performance," presented last week at the Black Hat conference in Amsterdam, Stefan Frei, Bernhard Tellenbach, and Bernhard Plattner of the Computer Engineering and Networks Laboratory at the Swiss Federal Institute of Technology analyzed Apple's and Microsoft's security practices over the past six years and found that Microsoft has been getting better at responding to security issues while Apple has been getting worse.

During the period studied, between 2002 and 2007, Microsoft had 658 high- and medium-risk vulnerabilities, compared with 738 for Apple, the paper says.

The revived popularity of Apple's products, the researchers suggest, may have left Apple unable to keep up. "Comparing the number of unpatched vulnerabilities per vendor for the period since January 2002 we observe a striking difference between Microsoft and Apple," the report says. "On average, Microsoft succeeds to keep the average number of unpatched vulnerabilities below 20 at a steady number. On the opposite, Apple seems unable to stabilize the number of unpatched vulnerabilities in recent years. We observe a steady increase in recent years for Apple. It seams [sic] that Apple's security processes and resources cannot cope with the side-effects of the increased popularity of their products."

Indeed, some Apple partisans have suggested that the successful hacking of a MacBook Air in the "PWN to OWN" contest at the CanSecWest security conference in Vancouver, British Columbia, last week was a deliberate attempt by security researchers to win Apple's sleek subnotebook for themselves and a rejection of the Sony Vaio and Fujitsu U810 computers that winning contestants could also have walked away with.

It should be noted that the researchers are analyzing Apple's patch process rather than the overall security of its products. The fact that antivirus software is still optional on Macs and all but necessary on Windows PCs demonstrates where the risk of malware is actually present.

Macs continue to benefit from security through obscurity, but that advantage is eroding as Mac market share continues to rise. Mac users may not welcome this, but computer security vendors surely will.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
Slideshows
How to Land a Job in Cloud Computing
Cynthia Harvey, Freelance Journalist, InformationWeek,  6/19/2019
Commentary
How to Convince Wary Customers to Share Personal Information
John Edwards, Technology Journalist & Author,  6/17/2019
Commentary
The Art and Science of Robot Wrangling in the AI Era
Guest Commentary, Guest Commentary,  6/11/2019
White Papers
Register for InformationWeek Newsletters
Video
Current Issue
A New World of IT Management in 2019
This IT Trend Report highlights how several years of developments in technology and business strategies have led to a subsequent wave of changes in the role of an IT organization, how CIOs and other IT leaders approach management, in addition to the jobs of many IT professionals up and down the org chart.
Slideshows
Flash Poll