Virus/Trojan Detection for Small Businesses?

luke123

Hi

Since viruses and trojans have become increasingly sophisticated in avoiding detection, and potentially embedded in the BIOS, like

http://www.webroot.com/blog/2011 ... ootkit-in-the-wild/

Is it possible for small businesses with very limited resources to detect well-hidden viruses and trojans by using a software firewall on each PC to monitor programs sending out packets?

Since Windows' default firewall only tracks incoming, not outgoing, packets, can a third-party firewall like ZoneAlarm, if used sensibly, be effective in detecting well-hidden viruses and trojans by tracking down their footprints through outgoing packets?

Thanks in advance for any input!

luke123

Any C Hing?

samiux

Hi

Since viruses and trojans have become increasingly sophisticated in avoiding detection, and pote ...
luke123 發表於 2014-3-13 11:00

Try to implement Intrusion Detection/Prevention System (IDS/IPS).  So that, you can monitor the packets incoming and outgoing.

Samiux

luke123

Try to implement Intrusion Detection/Prevention System (IDS/IPS).  So that, you can monitor the packets incoming and outgoing.

Samiux
samiux 發表於 2014-3-13 22:22

Thanks for your suggestion, Samiux.

In your view, would a similar feature built into many non-enterprise grade routers be adequate for this purpose, especially in tracking outgoing packets from an embedded virus or trojan? It seems that a lot of expertise is required to interpret the data properly.

Thanks again.

samiux

Thanks for your suggestion, Samiux.

In your view, would a similar feature built into many non-en ...
luke123 發表於 2014-3-14 08:40

For router with UTM (Unified Treat Management) only, I would recommend Untangle (http://www.untangle.com/).

For IDS/IPS, I would recommend SmoothSec (http://www.smoothsec.org/).  The implement is here - http://samiux.blogspot.com/2013/ ... -your-homesoho.html and here - http://samiux.blogspot.com/2013/ ... idsips-with_24.html

Good luck.

Samiux