Computer VirusThe hoopla surrounding the Conficker worm has taken the computer security world by storm. Headlines predict doom and gloom on April 1 because researchers believe attackers will activate the worm, gaining control of millions of zombie personal computers running the Microsoft Windows operating system. Conficker is a moot point with both a patched Windows and anti-virus software. What about those who have opted for Apple computers running the OS X operating system? Everyone knows anti-virus software is obligatory on Windows but is it even worth the hassle on OS X?

Although there are far less exploits available for Apple’s OS X operating system, the system does have vulnerabilities just like its Windows brethren. Apple publishes operating system security patches on a regular basis just like Microsoft and other operating system vendors. The platform is not immune to vulnerabilities so do not be lulled in to a false sense of security.

While it may be far more attractive for attackers to wield their wares at Windows because of the exponentially larger install base, OS X is entirely capable of being owned. Sure, OS X is relatively safe, but does that mean you should take the risk and not protect your system with anti-virus software as you would on any Windows workstation?

There are hundreds of thousands of malicious programs, viruses, Trojans, worms and other dangerous wares targeting Windows while there are less than 200 known to target OS X. That is a substantial difference and one better understood when you think about what drives attackers – money. Most security experts would agree that it is far more profitable for an attacker to target the dominant operating system rather than wasting their time with the OS X peanuts.

The bottom line is this – OS X is just as exploitable as Windows, but the incentive to divert resources towards abusing vulnerabilities in OS X is just not yet there. Does this mean it is worthwhile to purchase and install anti-virus software for your Apple computer?

I could offer you a very simple yes or no answer, but I do not believe that will ultimately be valuable. So let me respond to my previous question with this: it depends on what type of user you are.

Anti-virus software is generally resource intensive and relies upon unreliable signatures in order to protect your system. What this means is that if a new virus is released today, it requires the Symantec’s and McAfee’s of the world to research the malicious code in detail to determine how to adequately protect your system. Everyone is completely exposed from the time the virus is released in to the wild up until the point at which the Symantec’s and McAfee’s of the world release updated virus definitions which target the signature of the new malicious code.

I find this entire process to be overly cumbersome, time consuming and ultimately pointless if you are a responsible computer user. Although I do computer security for a living, and I hold the so-called coveted Certified Information Systems Security Professional (CISSP) certification, I am telling you that you probably do not need anti-virus software on your Mac.

But again, as I said previously, the real answer is it depends.

If you consider yourself a responsible user and rarely visit web sites remotely considered malicious, are paranoid about opening email attachments and have an email provider which makes use of both server-side virus and spam filtering then chances are you do not require anti-virus protection. It is imperative to rarely open email attachments or engage in what security researchers consider risky online behavior if you opt not to protect yourself with anti-virus software.

If you do actively engage in risky online behavior then definitely use anti-virus software. What is risky online behavior defined as? If you frequent potentially malicious websites, such as those operated by porn vendors, torrent tracker sites or sites generally designed to circumvent paying for software or entertainment (ie. music, movies, etc.), then you require protection. These sites are generally riddled with malicious code just waiting to ruin your day.

The average OS X user who does not engage in risky online behavior will not need to run anti-virus software at this juncture. One of the important aspects of information security is weighing the risk vs. cost. In this case, the risk is not worth the cost to your pocketbook and system resources because the threat does not currently exist.

In due time the landscape will most definitely change, especially as OS X is adopted in the corporate world. As more big businesses start using OS X, the more the operating system will be targeted since the financial incentive will make it a potentially worthwhile venture.

In the meantime, and until that day arrives, revel in the knowledge that the best protection against the Conficker worm is your Mac!