Microsofts sudden acquisition of highly rated anti-spyware startup Giant Company Software has set the cat among the pigeons.
As competitors rush to spin the news as a “validation” of the nascent anti-spyware sector, analysts predict that Redmond is working on an enterprise-class product combining spyware- and virus-fighting capabilities.
“We believe Microsoft will come out with an anti-virus product with embedded spyware protection and theyll start a price war in the enterprise space,” said Gartner security analyst John Pescatore.
In an interview with eWEEK.com, Pescatore speculated that Microsoft will launch a combined offering that marries Giants anti-spyware application to the anti-virus tools acquired in 2003 from Romanias GeCAD Software Srl.
At the time of the GeCAD acquisition, Microsoft made splashy headlines with plans to offer a standalone anti-virus tool for Windows users, but more than a year later, the company is still pointing customers to third-party offerings.
Amy Carroll, director of product management in Microsofts Security Business Technology Unit, declined to discuss long-term strategies. She said the immediate plans call for a beta of a standalone anti-spyware application for Windows 2000 and later versions.
During the beta, the application will be free, but there are hints that Microsoft will charge a fee for a final version. “We do not have a final plan for the final version. Well use the beta process to figure out the right business model,” Carroll said.
“It will be a client-side offering for individual machines. We will be encouraging all our customers to use that, whether inside a business or in a consumer setting,” Carroll told eWEEK.com.
Microsoft will continue to support Giant anti-spyware customers through the term of their existing contracts. Two other Giant products—Spam Inspector and Popup Inspector—will be discontinued.
Next Page: Microsoft says theres “no timeline” on an anti-virus product.
No Timeline
Asked directly if the Giant and GeCAD technologies would be merged into a single application, Carroll said it was “way too early” to discuss those moves. She said GeCADs technology and expertise had already been successfully used to create virus detection and removal tools to deal with cleanup from the Blaster, MyDoom and Download.Ject worm attacks.
“We havent moved away from our position to deliver an anti-virus product similar to whats out there today. But theres no timeline today on when that will happen,” Carroll said.
An anti-virus product would put Microsoft in direct competition with the likes of Symantec, Trend Micro and McAfee, companies that have partnered with the software giant on an information-sharing Virus Information Alliance.
Roger Thompson, director of content research security management at Computer Associates, described the Giant acquisition as “confirmation that the spyware industry cannot be ignored.”
“This confirms what weve been saying all along. You cant expect anti-virus products to adequately handle spyware. You simply cant make it work. It has to be done with a dedicated anti-spyware product, and clearly Microsoft recognizes this,” Thompson said.
Computer Associates, like other security vendors, charges extra for anti-spyware protection, but if Microsoft comes out with a combined offering and uses its marketing strength to compete, the competitive landscape could change dramatically.
But CAs Thompson isnt about to concede. “Weve always competed against free products. This is a new market, and its a big market thats growing very fast. From a competitive standpoint, this does not worry us at all,” he said.
Webroot Software Inc., an anti-spyware vendor with a major foothold in the enterprise market, believes its a “tough sell” for Microsoft in the security business.
“I see this deal as an acknowledgement from Microsoft that they cant deal with securing their own products,” said Webroot chief executive David Moll. “This is a big change from Microsofts original position on tackling spyware. [XP Service Pack 2] was introduced to deal with the spyware problem, but its gotten worse.”
“In the near term, this could be a nonevent like the GeCAD acquisition. In the long run, the question will be whether customers will purchase a security product to protect software that is sold by the same company,” Moll said.
“Its interesting to see if consumers will reward them for selling the solution to their own problem. For enterprises, I see this as a nonstarter. The last thing an IT administrator wants to do is trust their security to Microsoft,” he added.
Moll also questioned Microsofts overall approach to dealing with spyware, pointing out that the company just inked a three-year deal to use Webroots technology for its MSN subscribers. “Its not clear theres a well-thought-out strategy here.”
Eric Howes, an independent researcher who tracks the spyware scourge, said he thinks Microsoft will make a significant difference in the sector. “I doubt they will completely solve the problem because its very complicated and difficult to deal with spyware. But I think Microsofts involvement will go a long way toward making a difference.”
Check out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzers Weblog.