Sunday, April 16, 2006

» Why Windows is less secure than Linux | Threat Chaos | ZDNet.com

Excellent Security Blog by Richard Stiennon at ZDnet.


The basic argument goes like this. In its long evolution, Windows has grown so complicated that it is harder to secure. Well these images make the point very well. Both images are a complete map of the system calls that occur when a web server serves up a single page of html with a single picture. The same page and picture. A system call is an opportunity to address memory. A hacker investigates each memory access to see if it is vulnerable to a buffer overflow attack. The developer must do QA on each of these entry points. The more system calls, the greater potential for vulnerability, the more effort needed to create secure applications.

A picture is worth a thousand words. See diagram below.

The first picture is of the system calls that occur on a Linux server running Apache.

This second image is of a Windows Server running IIS.


Read the rest of it for an eye opener on Windoze vs. Linux security.

» Why Windows is less secure than Linux | Threat Chaos | ZDNet.com

0 Comments:

Post a Comment

<< Home