Jump to content

Norton Internet Security

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by S0aasdf2sf (talk | contribs) at 00:18, 26 February 2009 (→‎Windows XP Service Pack 3/Vista Service Pack 1: rom? changed to from. Also edited external link.). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Norton Internet Security
Developer(s)Symantec Corporation
Stable release
2009 or 16.2.0.7 (Windows Edition), 4.0 (Macintosh Edition)
Operating systemMicrosoft Windows, Macintosh OS X
TypeSecurity Suite
LicenseProprietary
WebsiteNorton Internet Security Site

Norton Internet Security (NIS) is a computer security suite developed by Symantec Corporation, with a focus on providing malware, exploit, and online identity protection. It is available for both the Microsoft Windows and Macintosh OS X operating systems.

System Requirements

The minimal system requirements are listed here.

Windows XP Service Pack 2 (32-bit only) Windows Vista (32/64-bit)
Processor Intel Pentium 300 MHz (or equivalent) Intel Pentium 800 MHz (or equivalent)
RAM 256 MB 512 MB
Free hard drive space 200 MB 200 MB

SONAR, which monitors applications for malicious behavior, is absent when Norton Internet Security is installed on 64-bit versions of Windows Vista.[1][2] A workaround is to use Norton AntiBot in lieu of the SONAR component. The "Norton Toolbar", which provides online identity and phishing protection, requires Internet Explorer 6 or Mozilla Firefox 2 to function. At least 512 MB of ram is required to run the Norton Recovery Tool, which facilitates malware removal and recovery via bootable CD, outside the Windows environment.

Features

Norton Internet Security 2009 is based around the Norton AntiVirus 2009 engine, which provides real-time and on-demand malware detection and disinfection. In addition to conventional signature-based detection, the Norton AntiVirus core includes two heuristic technologies, known as SONAR and "Bloodhound". Heuristics help facilitate detection of new, or zero-day malware, since malware has to be identified first before preventative or corrective measures can be taken. [3] SONAR monitors applications in real-time for suspicious and possibly malicious actions. When SONAR has gathered enough evidence to "convict" an application as being malicious, it will take the necessary corrective actions by quarantining related processes, files, and registry entries. On the other hand, Bloodhound looks at a file's code for possibly malicious instructions. [4]

Norton Internet Security 2009 also incorporates Norton Personal Firewall, a program and protocol-based firewall. When left at default settings, programs are automatically allocated Internet access as needed. Configuration settings allow users to specify which programs are authorized to access the Internet or configure Internet access by allowing or denying certain protocols. The "Norton Toolbar" installs as a browser toolbar. The Norton Toolbar incorporates "Norton Identity Safe", which stores confidential online form information, with the capabilities to automatically fill online forms as well, and phishing protection, which blocks access to fraudulent websites. Norton LiveUpdate automatically downloads and installs updates to various components of Norton Internet Security. Norton LiveUpdate also handles "Pulse Updates", which are issued every 5 to 15 minutes. [5]The "Intrusion Prevention" engine recognizes and blocks common exploits used by attackers. [6] Norton Insight uses whitelists to exclude known files from scanning, saving time, and "One Click Support" provides embedded support, with the ability to diagnose problems and guide users toward a solution. [7]

An optional add-on package for Norton Internet Security 2009 running on the Windows platform is available here. The package adds parental controls and e-mail spam filtering support for POP3 and the STMP protocols protection. [8]

Version History (Windows)

Version 2006 (13.0)

File:NPC Green.gif
The "Norton Protection Center", found in Norton Internet Security 2006

Norton Internet Security 2006 was released on September 26, 2005.[9] The redesigned main graphical user interface, dubbed the "Norton Protection Center" aggregates information in a central user interface.[10] CNET reports the Norton Protection Center, while useful, attempts to advertise additional products.[10]

Other features include Norton AntiSpam, which can automatically filter unwanted e-mails or be configured using a blacklist of blocked senders or a whitelist, comprised of allowed and trusted senders.[11] The "Privacy Control" feature allows users to enter confidential information, such as credit card numbers or phone numbers, that are not to be transmitted to third parties.[11] Parental controls assigns each user account an account type: Child, Teenager, Adult, or Supervisor, each preconfigured with certain restrictions. Fine-tuning allows a supervisor to define exceptions, add global blocked sites, create a whitelist, block certain programs from accessing the Internet, and restrict newsgroup access. However, the option to schedule times when each user is permitted to use the Internet is absent.[12] Advertisement blocking compares a website's code against a blacklist, and rewrites the HTML to prevent advertisements from being displayed. To further facilitate detection of zero-day malware, Bloodhound disassembles a variety of programming languages, and scans code for malicious instructions using predefined algorithms. [13] Internet Explorer homepage hijacking protection was introduced in this release as well; however notably missing is search engine hijacking protection.

Version 2007 (14.0)

File:Nis07 screenshot-lg.jpg
Norton Internet Security 2007's tabbed user interface

Released on September 12, 2007, Symantec revised Norton Internet Security with the goal of improving slow speeds and reducing high system resource utilization.[14] Despite having about 80% of the code rewritten, CNET reports mixed results in performance testing.[15]

New features include a tabbed interface, eliminating the need to have separate windows open for the Norton Protection Center and for configuring the settings.[15] Symantec extended its Veritas VxMS rootkit detection technology, allowing Norton 2007 to compare files within directories to files on the volume level.[15] Preventative measures against malware include the "Security Inspector" looks at system components which may host vulnerabilities, such as weak user account passwords, Internet Explorer settings, and file sharing settings. When possible, the Security Inspector will attempt to fix issues found, otherwise, user interaction is required.[16] A startup application manager is present as well, which users can use to remove unwanted applications launching at login.

Norton AntiSpam, Privacy Control, parental controls, and advertisement blocking were dropped from the 2007 release. The features are available in the 2007 add-on package only.The latest version of the add-on package drops advertisement blocking.[17]

Version 2008 (15.0)

The 2008 version was released on August 28, 2007. Emphasizing malware prevention, new features include SONAR technology, which monitors applications for any signs of malicious behavior, "Browser Defender", which blocks attacks attempting to leverage Internet Explorer exploits [18], and Norton Identity Safe, which stores personal information, such as phone numbers and credit card numbers, and fills online forms as needed. Identity Safe replaces the Privacy Control feature.[19]

The 2008 add-on package does not include the advertisement and pop-up blocking features found in the 2007 add-on package.

Version 2009 (16.0)

The 2009 version was released on September 8, 2008. Symantec claims it is the fastest amongst its predecessors and in the world because of its new architecture which reduces boot time, the scan time, memory usage as well as the system footprint and the install time.[20] Testing by PassMark Software highlights Norton Internet Security's 52 second install time, 32 second scan time, and 7 megabyte memory utilization.[21]

The Security Inspector feature and the tabbed interface were dropped from the 2009 release. Notable new features include Norton Insight, a whitelisting technology which cuts scanning times by mapping known safe files using information from an online database.[22] The Pulse Updates feature deliver updates to users every 5 to 15 minutes, an improvement compared to Norton Internet Security's 4 to 6 hour malware response times.[23] According to AV-test.org, Norton Internet Security 2009 beta received 6,202 updates over a four-week period.[23]

Macintosh Edition

Norton Internet Security 4.0 for Mac includes malware and phishing protection with a firewall. Norton Internet Security Dual Protection for Mac combines Norton Internet Security 2009 and Norton Internet Security 4.0 for Mac. It is intended for users of Intel-based Macs who have both Mac OS X v10.4.11 or later and Windows XP SP2 or Vista installed on their systems. [24]

Both products require at least Macintosh OS X 10.4.11. [25] Hardware requirements call for a PowerPC or an Intel Core processor, 256 MB of RAM, and 150 MB of free hard disk space. Symantec recommends 512 MB of RAM. [26] Norton Internet Security Dual Protection for Mac requires Windows XP Service Pack 2 or Windows Vista.

Product Support

Symantec offers free phone, e-mail, online chat support, which includes remote-control if the user allows it, and maintains both an online knowledge base and a user manual. There is also a user forum where users can solicit responses from Symantec employees and other users. Each support option, except for the user forums, are available in various languages and translations.

"One Click Support" provides embedded support for Norton Internet Security 2009 products. One Click Support will attempt to diagnose problems with the product and guide the user towards a fix. If no problems are found, One Click Support will guide the user towards other support options, such as chat support. Users can chat from within the One Click Support interface, provided they have the Adobe Flash Player 10 ActiveX control installed. One Click Support can automatically install the appropriate version of Flash.[27]

Criticisms

Many of the criticisms leveled at Norton Internet Security can also be leveled at Norton Internet Security due to its integration of Norton AntiVirus.

Uninstallation

Norton Internet Security has been criticized for refusing to uninstall completely, leaving unnecessary files behind, causing conflicts with other software installations. [28] In response, Symantec developed the Norton Removal Tool to remove its registry keys and values along with files and folders.[29] Earlier versions also installed a separate LiveUpdate component, which must be separately uninstalled, or removed using the Norton Removal Tool.[30] The 2009 edition does not bundle a separate LiveUpdate component. A Norton Removal Tool is still provided.

Windows XP Service Pack 3/Vista Service Pack 1

When Norton Internet Security 2008 is installed, users have encountered numerous invalid registry keys being added after upgrading to Windows XP Service Pack 3 or Windows Vista Service Pack 1. [31] Symptoms include an empty Device Manager, or missing devices such as wireless network adapters, which may result in the inability to connect to a wireless network. [32] Symantec initially blamed Microsoft for the incompatibilities but has since accepted partial responsibility. [33]

Symantec has responded to the complications users experience when upgrading their Service Pack versions by offering suggestions, and providing additional tools to aid in, and recover from, these Service Pack upgrades. Symantec has issued a fix intended for users before upgrading, available via LiveUpdate. In addition, Symantec recommends disabling the "SymProtect" tamper protection component before upgrading to Service Pack 3. [31] A tool to remove the invalid keys is also available. [34][35] To fix the incompatibilities after upgrading, a tool is available from Symantec here. [32]

FBI Cooperation

Symantec agreed to cooperate with the FBI on ways to preclude their product from detecting Magic Lantern, a government funded project focused on developing a "invisible" keylogger. Magic Lantern's purpose is to capture the cryptographic keys to encrypted documents on the host computer. [36][37][38][39]

This received criticism from Graham Cluley, a technology consultant from Sophos, claiming that "We have no way of knowing if it was written by the FBI, and even if we did, we wouldn’t know whether it was being used by the FBI or if it had been commandeered by a third party."[40] Another reaction from this came from Marc Maiffret, chief technology officer and cofounder of eEye Digital Security who stated: "Our customers are paying us for a service, to protect them from all forms of malicious code. It is not up to us to do law enforcement's job for them so we do not, and will not, make any exceptions for law enforcement malware or other tools."[41]

FBI spokesman Paul Bresson, in response if Magic Lantern needed a court order to deploy, "Like all technology projects or tools deployed by the FBI it would be used pursuant to the appropriate legal process."

Eric Chien, a lead researcher at Symantec, emphasized being able to identify "modified versions". [42]

Magic Lantern has not been spotted in-the-wild yet.[43]

64-bit support

Users claim a lack of transparency about 64-bit operating system compatibility from Symantec. [44] Norton Internet Security 2009 will install on 64-bit versions of Windows Vista, however SONAR protection is absent.[1][2] Complete 64 bit support is planned for future releases. [45]

Pop-up and Advertisement Blocking

Norton Internet Security 2006 included pop-up and advertisement blocking functionalities, later dropped in the 2007 release. However, the feature could be found in the 2007 add-on package. Later versions of the add-on package and Norton Internet Security have completely dropped the, to the disappointment of many users. [46][47] However, the feature is expected to be incorporated with the future 2010 add-on package. [48]

Automatic Quarantine

Norton Internet Security 2009 classifies malware on a scale, from "low", to "medium" and "high" risk, in terms of impact on system performance, privacy implications, and how difficult the item is to remove. Norton Internet Security 2009 automatically quarantines what it deems to be "high" or "medium" risk items. However, there is an option present with the following description, which many users have found misleading:

Remove Infected Files Automatically

Turning on the option will result in Norton removing all suspected malware regardless of its risk level. [49] Users then believed turning off the option should let the user decide what to do with all suspect items. To the contrary, turning off the option will cause Norton to prompt for user intervention only when malware is found inside a compressed file, such as a rar file, or a "low" risk item is detected, such as a tracking cookie. [50] Many users initially expressed confusion when Norton proceeded with removal of malware, despite the option being disabled by default.

Critical Reception

  • Norton AntiVirus 2009 detected 97.9% of malware in AV-comparative's August 2008 test.[51]
  • Norton AntiVirus 2009 detected 44% of malware in AV-comparative's November 2008 heuristics test[51]
  • Norton Internet Security 2009 beta detected 98.7% of viruses in AV-test's latest test.[23]
  • Norton Internet Security 2009 beta detected 95.4% of spyware and adware in AV-test's latest test.[23]

Note: Most test results for Norton Internet Security apply to Norton AntiVirus and vice versa, except for firewall tests and performance tests.

References

  1. ^ a b 02:06 AM (2008-12-30). "Norton Internet Security - Vista Home Premium 64 Bit - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. Retrieved 2009-02-23.{{cite web}}: CS1 maint: numeric names: authors list (link)
  2. ^ a b "System requirements for Norton Internet Security 2009". Symantec.com. Retrieved 2009-02-23.
  3. ^ "Virus Signature". Secure Computing. Retrieved 2009-02-25.
  4. ^ "understanding heuristics: Symantec's bloodhound technology" (PDF). Symantec. Retrieved 2009-02-25.
  5. ^ "The Norton Pulse Updates Feature". Symantec. Retrieved 2009-02-25.
  6. ^ http://www.symantec.com/business/security_response/attacksignatures/index.jsp
  7. ^ http://community.norton.com/t5/Norton-Protection-Blog/Norton-Insight-A-solution-to-performance-improvement-without/ba-p/20642
  8. ^ "Parental Controls: Norton Add-on Pack". Symantec.com. 2007-08-15. Retrieved 2009-02-23.
  9. ^ by bottod on December 7, 2005. "Norton Internet Security 2006 Internet security and firewall reviews - CNET Reviews". Reviews.cnet.com. Retrieved 2009-02-23.{{cite web}}: CS1 maint: numeric names: authors list (link)
  10. ^ a b by sralls on October 3, 2005. "Norton AntiVirus 2006 Internet security and firewall reviews - CNET Reviews". Reviews.cnet.com. Retrieved 2009-02-23.{{cite web}}: CS1 maint: numeric names: authors list (link)
  11. ^ a b "Security: A Suite Gift - Norton Internet Security 2006 - Full Review - Reviews by PC Magazine". Pcmag.com. Retrieved 2009-02-23.
  12. ^ "Security: A Suite Gift - Norton Internet Security 2006 - Full Review - Reviews by PC Magazine". Pcmag.com. Retrieved 2009-02-23.
  13. ^ "Bloodhound". Symantec. Retrieved 2009-02-23.
  14. ^ Reviewed by: Robert Vamosi. "Norton AntiVirus 2007 Internet security and firewall reviews - CNET Reviews". Reviews.cnet.com. Retrieved 2009-02-23.
  15. ^ a b c Reviewed by: Robert Vamosi. "Norton AntiVirus 2007 Internet security and firewall reviews - CNET Reviews". Reviews.cnet.com. Retrieved 2009-02-23.
  16. ^ "Rad Tech Gifts for Grads - Norton Internet Security 2007 - Fresh Phish and Stale Settings - Reviews by PC Magazine". Pcmag.com. Retrieved 2009-02-23.
  17. ^ "Norton Internet Security 2007". Symantecstore.com. Retrieved 2009-02-23.
  18. ^ http://pcworld.co.nz/pcworld/pcw.nsf/feature/D797C6B246A7ECA5CC25734600732321
  19. ^ "11 Critical Security Apps - Norton Internet Security 2008 - Keep Your Identity Safe - Reviews by PC Magazine". Pcmag.com. Retrieved 2009-02-23.
  20. ^ "Symantec Launches Fastest Security Products in the World". Symantec.com. 2008-09-09. Retrieved 2009-02-23.
  21. ^ http://www.passmark.com/ftp/antivirus_09-performance-testing-ed3.pdf
  22. ^ Tal (January 5, 2009). "Norton Internet Security 2009". geekstogo.com. Retrieved 2009-01-07.
  23. ^ a b c d e http://www.virusbtn.com/news/2008/09_02
  24. ^ "Worm Removal - Anti Phishing Filter - Identity Theft Protection: Norton Internet Security for Mac Dual Protection". Symantec.com. 2007-08-15. Retrieved 2009-02-23.
  25. ^ http://www.macobserver.com/tmo/review/norton_internet_security_4_a_comprehensive_suite/][http://www.networkworld.com/news/2008/121808-symantec-norten-internet-securit.html?page=2
  26. ^ "Norton Internet Security For Mac®". Symantec. Retrieved 2009-02-24.
  27. ^ "Accessing One Click Support in your Norton 2009 product". Symantec.com. Retrieved 2009-02-23.
  28. ^ "How can I fully remove Norton Antivirus from my system?". Dave Taylor. Retrieved 2009-02-23.
  29. ^ "Download and run the Norton Removal Tool". Service1.symantec.com. Retrieved 2009-02-23.
  30. ^ "PCWorld". PCWorld. Retrieved 2009-02-23.
  31. ^ a b Patch Watch, May 29, 2008 (2008-05-29). "Norton software conflicts with Windows XP SP3". Windowssecrets.com. Retrieved 2009-02-23.{{cite web}}: CS1 maint: multiple names: authors list (link) CS1 maint: numeric names: authors list (link)
  32. ^ a b "FAQ: Upgrading to Windows XP Service Pack 3 or Windows Vista Service Pack 1 with your Norton 2008 product installed". Solutions.symantec.com. Retrieved 2009-02-23.
  33. ^ Gregg Keizer (2008-05-23). "Symantec pins blame for XP SP3 registry corruption on Microsoft". computerworld.com. Retrieved 2008-06-19.
  34. ^ "Problems occur after installing Windows XP Service Pack 3 or Windows Vista Service Pack 1 with a Norton 2008 product installed". symantec.com. 2008-06-17. Retrieved 2008-06-19.
  35. ^ "FAQ: Upgrading to Windows XP Service Pack 3 or Windows Vista Service Pack 1 with your Norton 2008 product installed". Solutions.symantec.com. Retrieved 2009-02-23.
  36. ^ "Magic Lantern (software) - Wikipedia, the free encyclopedia". En.wikipedia.org. Retrieved 2009-02-23.
  37. ^ http://www.kaspersky.com (2001-12-11). "The FBI's "Magic Lantern" Shines Bright". Kaspersky.com. Retrieved 2009-02-23. {{cite web}}: External link in |author= (help)
  38. ^ "FBI Has a Magic Lantern". Usgovinfo.about.com. Retrieved 2009-02-23.
  39. ^ "The FBI's Magic Lantern". Worldnetdaily.com. 2001-11-28. Retrieved 2009-02-23.
  40. ^ Jackson, William (2001-12-06). "Antivirus vendors are wary of FBI's Magic Lantern - Government Computer News". Gcn.com. Retrieved 2009-02-23.
  41. ^ McCullagh, Declan (2007-07-17). "Will security firms detect police spyware? - CNET News". News.cnet.com. Retrieved 2009-02-23.
  42. ^ http://www.theregister.co.uk/2001/11/27/av_vendors_split_over_fbi/
  43. ^ Shane Coursen (2001-12-03). "'Magic Lantern' Rubs the Wrong Way". Securityfocus.com. Retrieved 2009-02-23.
  44. ^ "Antivirus for XP 64 bit OS - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. Retrieved 2009-02-23.
  45. ^ 04:36 PM (2008-10-27). "Re: NIS 2010 suggestions - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. Retrieved 2009-02-23.{{cite web}}: CS1 maint: numeric names: authors list (link)
  46. ^ "NIS 2010 suggestions - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. Retrieved 2009-02-23.
  47. ^ "Re: NIS 2010 suggestions - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. Retrieved 2009-02-23.
  48. ^ 04:36 PM (2008-10-27). "NIS 2010 suggestions - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. Retrieved 2009-02-23.{{cite web}}: CS1 maint: numeric names: authors list (link)
  49. ^ "Re: remove infected files automatically, turned off? - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. 2008-09-30. Retrieved 2009-02-23.
  50. ^ "NIS 2009 - Do not automatically remove? - Norton Internet Security / Norton AntiVirus - Norton Community". Community.norton.com. Retrieved 2009-02-23.
  51. ^ a b "AV-Comparatives". AV-Comparatives. Retrieved 2009-02-23.
Retrieved from "https://en.wikipedia.org/w/index.php?title=Norton_Internet_Security&oldid=273313818"