Software EV SSL: The next weapon against malware?

Who really made your software?

Post a comment
Print

By Nick Heath, 13 November 2008 12:21

NEWS

The technology that protects consumers from spoof websites could be unleashed as the next weapon in the fight against malware.

Security company Verisign is looking at creating a system to certify software is what it claims to be, rather than malware masquerading as a software upgrade, for instance.

The vision is for a system which will work similarly to Verisign Extended Validation SSL (EV SSL), which turns web browsers' address bar green to guarantee that sites are genuine and not malicious.

The proposed system for authenticating software could flash up a symbol during the installation process certifying software was created by the organisation it purported to be.

The plans are being discussed by the Certification Authority Browser Forum, a voluntary organisation of certification authorities and vendors of internet browser software, including Microsoft, that helped develop the EV SSL certificate system.

silicon.com Financial Services

Get the latest financial services news straight to your inbox. Sign up for the FS newsletter today!

Verisign would offer certificates to software makers who passed its screening and auditing criteria - much in the same way that it does to online organisations signing up for EV SSL certificates.

The operating system would hold a list of certificates issued to trustworthy software makers and check for the certificates within the software during installation.

A spokesman for Verisign said: "We are looking to expand the SSL to other certificate types where we will know the identity of the author of a piece of software before you install it on the machine.

"The OS would control what it looks like."

Post a comment
Print

Post your comment

In order to post a comment you need to be registered and logged in.

Latest Security stories

Featured white papers

Vulnerability Management Buyer's Checklist

Qualys

Key Questions to Ask Before You Select a VM Solution Choosing a solution for Vulnerability Management (VM) is a critical step toward protecting your organisation's network and data. Without proven, automated technology for precise detection and remediation, no network can withstand the daily onslaught of new vulnerabilities that threaten security. To help finalise your decision on which solution to buy, Qualys provides this 12-point short list of considerations that will help you determine what will work best for your organisation.

Download now »
Creating a Dynamic Infrastructure through Virtualization

IBM

In almost every case,the transformation to a dynamic infrastructure will involve virtualization.Many IT professionals think of virtualization specifically in terms of servers.IBM,however,has a broader perspective,in which virtualization is seen as a generalapproach to decouple logical resources from physical elements,so that thoseresources can be allocated faster,more cost-effectively and more dynamically,wherever the business requires them in real time to ideally meet changingdemand levels or business requirements.

Download now »
How IP geolocation can improve your website experience and marketing activity

Quova

With geolocation technology, you can know a web user's real world whereabouts. This report examines the benefits from the fictional retailer's point of view. Things-4-You- a thriving online business, which had a poor record in converting online visitors into buying customers. Things-4-You demonstrates the potential of IP geolocation online. retailers.

Download now »