And they are off! The 2011 collection of security products

It is that time of year again – the time for the new security suite products to make their way onto the market. We have just launched Norton Antivirus 2011 and Norton Internet Security 2011. The requirement for strong, multi-layered security products has never been more necessary. With the release of the Norton Cybercrime Report: Human Impact, we highlight that 60% of people report that they have been a victim of cybercrime. My take on this is that people need to take security seriously. That starts with them using the best available security products to reduce their risk profile whilst online.

The clear and present danger is with consumers being misled into installing malware onto their computers. Basically, helping do the cyber criminals job for them, through a whole panoply of scams. The Fake AV scams have become particularly bothersome. Our Reputation based security technology, as deployed in Norton 2010, is really starting to make a significant difference in helping defend against the downloading of files with bad reputations, or no reputation. With Norton 2011, we have now extend the reach of our reputation technology within the product. If you are using any of the popular web browsers, IM and email clients and file sharing clients, Norton Download Insight  is working right beside you, to stop the bad and suspicious files making their way onto your system. Lots of customers told us that they loved the performance information we provided them with Norton 2010. They said they wanted more of it and would like to see it brought to their attention as they went about using their PCs. Well, that is exactly what we have done with System Insight 2, as featured in this year’s product.

There are changes to the main UI as well. A Norton customer can now access Norton Online Family, Norton Online Backup and Norton SafeWeb from the main UI of NAV and NIS. We have also included a threat-map to allow our customers a view of what is happening out there: a gentle reminder to our customers that cybercrime is ever present.

Another noteworthy development with the launch of Norton 2011 is the introduction of Norton Safe Web for Facebook. It’s free. It’s effective. And it makes your experience on Facebook safer. The Norton Safe Web for Facebook application scans your news feeds and identifies URLs containing security risks such as phishing sites, malicious downloads and links to unsafe external sites. There is also another free tool that we are releasing with Norton 2011, Norton Power Eraser. It is a malware clean-up tool that goes after those deep-rooted infections and will  help get a machine back-up and running.

Norton 2011 is now going to be extensively reviewed and tested. The initial results are great. Dennis Labs have tested the efficacy of Norton 2011 , together with other leading security products and Norton 2011 came out at the top of the pile. Just this very morning CNET reviewed NIS 2011 and awarded it a 5 out of 5 rating.

If you are an existing NAV or NIS customer, with a valid subscription, you can upgrade yourself to the new 2011 products, via the Norton Update Center. Enjoy!

Adam Palmer Q&A Part 2

Adam Palmer is Norton’s Lead Cybersecurity Advisor. Adam works across multiple business groups within Symantec to create programs that will support law enforcement and industry efforts to reduce cybercrime. He combines 10 years of law enforcement and technology experience in the cybersecurity field.

What do you consider to be the main challenges facing the AV industry over the next 12-18 months?

Protecting Mobile Internet connected devices and also fighting fake anti-virus products or “scareware”. People are now moving beyond the PC and connecting to the Internet from lots of different devices. We already know that these devices can be targets of cybercriminals. Our Norton Everywhere program is designed to offer effective and easy security solutions for mobile devices. Scareware is a clever fraud designed to steal Internet users’ identities and money. The fraudster falsely claims to have found viruses on the user’s computer and then may offer a “security solution.” The “solution” is probably a complete fraud designed only to download more bad things onto the computer and steal the innocent person’s identity. This is a serious problem because it takes advantage of people trying to obtain real security protection on their Internet-connected device.

What will Norton be doing to help address these issues?

In addition to supporting the Norton Everywhere program to secure mobile connected devices, I am also working with law enforcement to create the Norton TRUE Security Coalition. The TRUE Security group will bring together REAL security experts from Norton and law enforcement to help discuss strategies for catching the makers of fake security schemes. We want to educate consumers about the fake security threat and how to identify real security solutions like Norton 360.

How will consumers benefit as a result?

Norton Everywhere is a new approach to mobile security that was designed to create security solutions specifically for mobile devices. Mobile devices have different needs and there are different threats that need to be considered. Norton Everywhere provides security that does not interfere with mobile usage and includes mobile specific solutions like a remote data wipe feature that can prevent personal data from being read if the miobile device is lost. Consumers have the right to be protected by a real security solution, like those offered by Norton. The Norton TRUE Security Coalition is also a first step to stopping the fake security threats like “scareware” and protecting consumers.

Do law enforcement agencies need to be better educated about the risks of cybercrime?

Law enforcement sees the harm caused by cybercrime every day. I know they really care, but sometimes they just don’t have the resources to catch all the bad guys. Cybercrime is especially difficult because the cases are so complex and often require international cooperation. One area that can improve is training law enforcement to investigate cybercrime cases. The facts are clear that cybercrime is real and serious—it’s also different than most other types of crime:

• Cybercrime typically results in large aggregate losses, but small individual losses.
• Many cybercriminals operate outside the victim’s country making prosecution difficult
• Very few cybercriminals are successfully prosecuted.

The global community shares many common interests against cybercriminals and cooperation, not criticism, is the key to success. Law enforcement must effectively combat cybercrime or faith in the criminal justice system is at stake. Good security helps protect consumers in the short term but the long term solution is collaborating with law enforcement to stop the threat. Until we improve law enforcement capability, however, each Internet user must take responsibility for security and not rely on the assumption that law enforcement will protect them on the Internet.

How do you see companies like Norton working with law enforcement officers to help educate consumers about cybercrime?

Norton is discussing training and conference programs that can help drive cybercrime investigations and prosecutions. We are examining ways that we can provide support for cybercrime victims. By teaming with law enforcement, companies like Norton can offer advice to consumers on key safety practices like having good, updated security software installed on their computer and to make sure they also secure their mobile devices. We need to provide a trusted resource for consumers where they can get answers to how to protect themselves online.

Who else do you think should play a role in spreading the message about staying safe online?

There are many great anti-cybercrime non-profit groups. These groups already have close relationships with global law enforcement and are putting the right tools in the hands of investigators and educating consumers. Keeping secure online is an imperative that every Internet user should understand and follow.

What can consumers do to help protect themselves from cybercrime?

Every device that connects to the Internet, including smartphones and tablet computers needs good security to stay safe. Individual users need to protect themselves with strong security software. Because it is extremely difficult for law enforcement to pursue cybercrime cases, it’s critical that consumers keep updated security software installed and exercise caution online.

If you missed it, you can catch up with the first part of this Interview with Adam Palmer here.

Adam Palmer Q&A Part 1

Adam Palmer is Norton’s Lead Cybersecurity Advisor. Adam works across multiple business groups within Symantec to create programs that will support law enforcement and industry efforts to reduce cybercrime. He combines 10 years of law enforcement and technology experience in the cybersecurity field.

From 2000 to 2003 Adam served as a U.S. Navy JAG (Judge Advocate General’s Corp) prosecutor handling a range of cases including many of the first military cybercrime related prosecutions. For the last five years he was also assigned to a specialised JAG instructor unit where he served as the lead cybercrime prosecution instructor for the U.S. military. Adam also spent 3 years as Legal Director for The National Centre for Missing & Exploited Children (NCMEC), the U.S. largest non-profit dedicated to combating Internet crimes against children. During this time, Adam served as an Instructor in cybercrime prosecution related courses for the National District Attorney’s Association (NDAA), the National Association of Attorneys General (NAAG), and The National Law Centre for Children (NLC). Most recently Adam was the policy counsel for the .ORG Top Level Domain Registry where he designed a cyber security program that was cited by the Anti Phishing Working Group (APWG) as one of the major Internet security successes of 2009.

Adam has authored several articles on cybersecurity issues. He has taught cybercrime related courses at Washington & Lee Law School and The University of Mississippi Law School and has been a guest lecturer on cybercrime at Georgetown Law School. In 2009 Adam was a finalist for the Washington DC Association of Corporate Counsel “Outstanding Corporate Counsel” award and he was selected the U.S. Navy “Howell” Award Winner as a top JAG Reservist Attorney for his work teaching cybercrime prosecution.

Can you tell me about your role in the US Navy and any particular cybercrime cases in the UK/Europe that you worked on?

Cybercrime is a global problem requiring international cooperation. When I was a prosecutor, UK law enforcement was a tremendous help in my cases. In one case in particular, I was grateful for the assistance of two UK police officers who flew to the United States to serve as witnesses at trial. Their assistance was invaluable to the success of obtaining a conviction. During my most recent job I worked as policy counsel for .ORG, the third largest Internet domain and designed their security program. It was during this time that I often worked closely with the operators of .UK, Nominet. Nominet provided assistance helping me understand cybercrime issues and leadership establishing industry groups to fight cybercrime. I have also worked as a representative to a major European Internet industry group called CENTR. CENTR members really care about security. I was always impressed that although this was an EU group, that members allowed me to participate and learn from their meetings. Everyone understands we are fighting an enemy that ignores national borders and victimises citizens on every continent. My experience fighting cybercrime has been a rewarding opportunity to work with really smart, good, people around the world. Everyone is working toward the common goal of trying to protect the Internet and its users.

How has your previous job helped to prepare you for the work you’re now doing at Norton?

I have served as a cybercrime prosecutor, taught cybercrime law, and worked closely with anti-cybercrime non-profit groups for over 10 years. I have seen the harm cybercrime can cause and I know how hard it is for law enforcement to successfully catch and prosecute cyber criminals. I am now lending my experience to work with global law enforcement to advance the fight against cybercrime and put handcuffs on the bad guys. I love technology and want to protect consumers who use the Internet. I know what consumers are up against. Hopefully I can raise awareness about cybercrime so we can keep people safe and help them to continue to enjoy the Internet safely.

What are you currently working on at Norton?

I am working on new strategies to raise consumer awareness of cybercrime. The Norton Cybercrime Report: The Human Impact revealed that 65 percent of all Internet users have been victims of cybercrime. This is unacceptable. Many of the digital dangers consumer face can be prevented by good security software and safe online practices. I am also meeting with global law enforcement and industry leaders to learn more about how we can support their efforts to stop cybercriminals.

Please join us on Thursday for part two of this chat with Adam.

A window into the true impact of Cybercrime: are you the two-out-of three or the one-out-of three?

Today we have released a report that shines a light onto the true impact and cost of cybercrime. It is staggering that, based on a worldwide survey, that we at Norton commissioned, two-thirds of people (65%) admitted that they had fallen victim to cybercrime. For the UK, the figure was, just slightly better, at 59%.

Not unsurprisingly, people are getting really annoyed (51% of respondents) and angry (58%) about the impact of cybercrime. However, they blame themselves for being attacked and only 3% of people do not think that it will happen to them.

Despite the emotional burden and the universal threat, and incidents of cybercrime, people are not changing their behaviours – with only 51% of adults saying they would change their behaviour if they became a victim. Fewer than half (44%) reported crime to the police. The point here is that if we as individuals and as a society keep this quiet then we help the criminals stay under the radar.

So what it the cost of cybercrime? Well, in the UK, the cost to resolve cybercrime comes to an average of £103 and about 25-days. This is the down-stream impact and as you can see it is not insubstantial.

The moral compass for some us is leading us into problems. Nearly half of respondents think it is legal to download a single music track, album or movie without paying. But we, in the security community know that downloading files, from sites of dubious authenticity, is a well worn and effective infection vector. The advice really needs to be, ‘there is no such thing as a free music track/album/video’!

Look, the best defence against cybercrime, and the best way to protect yourself, is to surf the internet with up-to-date, comprehensive security software.

You can access the full Norton Cybercrime Report: The Human Impact here.