Security News

Yes, you’re in the right place: this is still The Mac Security Blog. But a recent announcement from Microsoft is so important for the overall security industry that we felt it necessary to offer some thoughts.

This week, Microsoft announced a new, free anti-malware service for Windows. Codenamed “Morro”, this new service “will provide comprehensive protection from malware including viruses, spyware, rootkits and trojans.” Microsoft said that “This new solution, to be offered at no charge to consumers, will be architected for a smaller footprint that will use fewer computing resources, making it ideal for low-bandwidth scenarios or less powerful PCs.” This suggests that Morro may eventually be adapted to other platforms than PCs; netbooks, OLPCs, and even perhaps a Morro for smartphones in the future?

Morro is due to replace Windows Live OneCare, a subscription service that Microsoft launched in 2006. Windows Live OneCare combined “antivirus, anti-spyware and firewall software with backup features and several tune-up tools for Windows PCs.” When it was released, it shook up the Windows security market by offering a radically lower price for such a service: at $50 a year, Windows Live OneCare undercut other Windows security vendors’ packages, which were averaging around $120 to $130, though the latter included additional services. Now, most Windows security prices have aligned with Microsoft’s price.

How will this affect companies that sell Windows antivirus solutions?

But the question is how these companies – Symantec, McAfee, Trend Micro, Kaspersky, etc. – will compete with free. One article points out that the major security vendors’ share prices dropped sharply after the announcement: “Symantec shares fell 9.44 percent to $11.23, while McAfee’s dropped 6.62 percent to $26.68.” This said, with the current bear market, it’s hard to tell how much of this drop was caused by the Microsoft announcement and how much was caused by the broader sell-off.

But beyond the profit-and-loss possibilities, what implications does this have for the broader security market? First, Microsoft has made a bold statement, suggesting that in order to ensure that Windows users be secure, Microsoft has to do the work. Offering this service for free is also a way of saying that security is both a right and a responsibility, so the more than 50% of consumers who are unprotected will no longer have a reason to remain so. It’s like vaccinations; society in general benefits when everyone is healthy, and Microsoft plans to give out the shots for free.

An optional add-on, perhaps for Windows 7

While Morro won’t be part of Windows, its release date – second half 2009 – corresponds with the likely release date of Windows 7, and it will fit perfectly with the new operating system. Microsoft will be able to tout the new operating system and its free security service together.

Whatever the results for Morro, it is clear that the Windows security industry – at least the divisions that deal with products for consumers – is going to have to rethink its strategy. Competing with free requires a premium product or service that has enough value added to convince consumers to pay extra. While Morro may be enough for most users, security vendors will have to come up with more innovative products to get users to pay.

Microsoft’s recent move has changed the entire security industry, and time will tell just how well Morro is accepted. Windows users are probably starting to think about saving money, and security vendors are back at the drawing board, looking for new ways to sell their products. With all this in mind, I’ll be one of the first to remove the antivirus software I currently use on my Windows installation and install Morro. We wish Microsoft, and Windows users, well in this new venture.