What Google Chrome Will Mean For Cyber-Security

IF YOU worry about your computer being infected by viruses, or regularly spend money on software to prevent that happening, then here's some good news: a carefree antivirus nirvana beckons. Or so Google and Microsoft would have you believe.

Last week, Google announced plans to launch a computer operating system in mid-2010 based on its Chrome web browser, directly challenging Microsoft's hold on the market. Google Chrome OS is intended for people "who live on the web" and who are happy to run remote software located on servers in Google's internet data centres - or "in the cloud" as it is known - rather than have all the software downloaded onto their computer. It will be based on a version of the free, open-source Linux operating system.

While further details on the Chrome OS are scant, Linus Upson, Google's engineering director, made one major promise: "We are completely redesigning the underlying security architecture of the OS so users don't have to deal with viruses, malware and security updates. It should just work."

The idea chimes with Microsoft's plans for the latest version of its own operating system, which launches in October. Windows 7 will run software like Word and Excel, stored on the user's computer in the traditional way, but for the first time will include free regularly updated antivirus software.

Which is likely to be the more secure approach? At this stage it is not clear. "Downloading updates is always going to be a step or two behind the cloud approach because it takes a while to get a fix out to a PC to install it," says Paul Jackson of Forrester Research in Cambridge, Massachusetts. "The cloud approach allows patches to be applied much faster." However, he doubts Chrome OS will be able to do all its virus fighting remotely, since a web-based operating system will still be vulnerable to viruses that target the web browser and Linux itself.

Robert Caunt, an analyst with CCS Insight in London, points out that Google has a relatively good record on security. "Its gmail spam filter and search engine's phishing-detection is good. They know what needs doing."

In contrast, critics liken Google's cloud computing approach to the situation in the 1960s, when computer users "time-shared" connections to a mainframe - a slow-to-access centralisation of data that Microsoft's PC revolution was supposed to have quashed.

Whichever proves the better, it is encouraging that the two computer giants are finally taking malware seriously, rather than leaving it to third parties.

Source: NewScientis