Should Anti-Virus Software Go Open Source?
September 2nd, 2007
Currently many web surfers make the terrible mistake of using one of several paid anti-virus softwares on the market, such as the popular Norton and McAfee softwares. Not only are they not the best anti-virus software available, but if you were to ever take the time to look into it a little bit, you would probably see that they are usually the culprit when your computer is running extremely slow.
Luckily there are several free alternatives that won’t cause you all of the headaches. I personally use Avast and recommend them to most people that are setting up a new computer. Another nice alternative I’ve used is AVG, which is also available at no charge when using it for personal use (non-commercial).
One of the debates that comes along with the recent open source movement is the idea that anti-virus software could at some point go to open source. Chris Pirillo recently looked at whether anti-virus software is the virus. In the post, he looks at the effects open source would have on an anti-virus. The post is very well written, but the most notable part is actually where he quotes Peter Schwankl’s thoughts on the matter:
I like your idea that all Anti-Virus should be free! A company is indeed selling the cure for the poison that appears. It’s just a vicious cycle. But then again, I think open source is a mistake. I would think that an open source version of an anti virus would cause problems with potential hackers having access to the source code of an anti-virus, causing two things to happen:
- Impossibly hard-to-crack AV programs
- Far more devastating virii
It should be said that an AV program, open or closed, can have a hacker gain access to the source code, but making it easier is like handing it to them. Because that’s what’s happening.
So therefore, I think AV programs do indeed need to be closed source, an open source community wouldn’t have the dedicated resources that a company does to produce consistent, worthwhile, and stable-running AV software. Also, like with the Vista situation right now, open source can have a VERY long turnaround time when crossing to new OSes, leaving people crossing over, especially from OEMs such as Dell, or HP that move to the newest OS immediately, without protection while it’s updated for a new OS, where as companies are given OS Dev kits in advance.
However, while they should NOT be open source, they should on the same note be free. I WILL NOT pay to cure the poison that is omnipresent.
The benefits of open source for an anti-virus are obvious, with thousands of people around the globe having access to the code and trying to improve the product, but I think Peter is correct in his assessment. If hackers can access the source code, then the anti-virus software would quickly become worthless.











ClamAV (and the win32-counterpart, ClamWin) is still around, live, and kicking. And as far as devastating virii, that would be like saying Linux is more dangerous than Windows, since it’s opensource, wouldn’t it?
I think all things opensource are great…
And yea, ever since my problems with Norton and McAfee, I’ve moved onto ClamWin WinPooch (and of course a dash of Spybot S&D, and Lavasoft Ad-Aware mixed in for “spyware” cleaning).
I think part of the problem with these antivirus solutions (ala McAfee, Norton, hell, even ZoneAlarm!) is they are moving towards the “all in one” solution, combining firewalls, privacy protection, antivirus, cookie protection under one roof. The problem with that is, all it takes is for the perpetrator to take down one system and your doors are wide open.
I, too, use Avast…have for a couple of years and I’ve been pleased with it. I gave NOD32 a try last year and found it to be great, but being the cheapy that I am, I went back to the freebie.
When I first saw your headline I thought, “Sure!”. But then I immediately changed my mind when I realized the potential havoc that could ensue. But to really fix the problem, or at least detour it severely, Microsoft needs to do something about their OS not being such an attraction. I don’t know the details, but from what I’ve heard if they just did what Apple has done to their OS, life would be a lot simpler.
I prefer closed-source antivirus applications because I like the assurance that virus writers can’t easily find the exploits in programs. I think free antivirus apps that aren’t open-source are the way to go.
Adam – All things open source are great (and I try to support open source by using mostly open source products), but think how easy it would be for hackers to find holes in the anti-virus software if it was open source? I don’t think I would be comfortable using it.
Cha-ching. You nailed this on the head! Not only does it drive up prices because you have to buy all the additional stuff you don’t necessarily want, but like you said it is almost less safe. Fewer checks and balances.
Mark – I am not an Apple fanboy (although my next computer purchase could be a Mac product), but I think there is some truth to that. I do think Apple would have a lot of the same problems that Microsoft now has if their situations were reversed though. Also, I know Microsoft has several versions, but all of their OS have to be compatible for corporate usage in some form or another, because that is where they make most of their money on Windows. I think all things considered, that Microsoft has done pretty well with that responsibility.
Ryan – That kind of echoes my thoughts. While I fully support open source, I don’t necessarily think I would use an open source anti-virus product.
Interesting article.
But, actually I’ve been thinking that programmers are so lame nowadays. Even if they are open source programmers or not.
I wrote about this in my blog, take a look:
Why are we so lame?
Freeware Anti-virus is great, but Open-Source anti-virus is just extremely silly idea!
here’s why:
1) Take a look at source code
2) Find a bug
3) Exploit it
4) Open-Source Anti-virus is gate for Hackers