Intel needs to rethink security to profit from McAfee buy

Power, performance and (now) protection


Analysis Intel's surprise $7.76bn acquisition of McAfee is not only the biggest pure-play security deal in history, but the most significant statement of intent by an IT superpower since Microsoft launched its Trustworthy Computing initiative back in 2002.

Microsoft launched the initiative to develop products that are more secure by design in part as a response to the Code Red and Nimda worms. Redmond has won friends and influenced people in the security industry since, and while failing to shrug off jibes that its software is insecure has at least prevented security concerns from becoming a reason for enterprises to ditch its technology.

Intel, by contrast, has no significant security detractors. You have to go way back to the PIII privacy debate to find any significant negative comment about the chip giant.

Que?

The chip giant's bold move has many security watchers scratching their heads. Intel paid an awful lot for a company with no obvious synergy.

During a conference call, the chip giant said it wanted to make security a third pillar of computing alongside energy efficiency and connectivity. By adding the number two seller of security software to its stable, Intel can add security features to its core business, microprocessors and chips.

But if the deal was technology-motivated, then Intel might have been able to gain much the same expertise by buying up one, or more, of the 20 odd smaller players in the diverse but yet mature anti-virus market. Although boasting only a fraction of McAfee's market share, some of these players arguably boast better technology and research.

McAfee is a significant player in all the security market segments it plays in, but there's nowhere from anti-virus to IPS to mobile security where its products particularly stand out. On the services front, McAfee has had some success delivering services from the cloud.

However, Trend, Panda and Symantec (via MessageLabs) have moved into that market too. Kaspersky Lab has a lucrative businesses in licensing its anti-virus technology to third-party security vendors, such as all-in-one security appliance suppliers.

Government power play

Only Symantec outstrips McAfee in size or compares in the value of its government business. McAfee's Secure Computing firewall business and EPO desktop suite are preferred products in the US government, which is looking to increase cyber security spending to respond to increased threats.

Whether Intel needs McAfee to get into government businesses seems at least questionable, and the premium it paid for McAfee's shares - 62 per cent - looks over the top. HP, a more natural fit, was rumoured to be interested in buying McAfee back in April.

Some speculate that a bidding war for McAfee may have taken place. Whether that's true or not, McAfee investors are sitting pretty with its stock hitting a ten-year high on the announcement of the deal.

Everybody needs good neighbours

Intel gave technical reasons why it had decided to buy rather than simply partner with McAfee during a conference call, but none of the rationale appeared especially convincing. Its executives half-joked that Intel and McAfee were already neighbours in many locations. McAfee is a local, established brand and therefore an easy fit. Surely that can't be the reason, or even part of the rationale, can it?

The chip giant is already a partner and customer of McAfee. Ironically it was one of the firms worst affected by a rogue security update from McAfee that froze many Windows systems back in April. Perhaps it thought it could do better or, like Victor Kiam, who said he bought Remington because he liked its electric razors so much, Intel was smitten with McAfee's kit.

Register readers, if not the general public, will know that Intel has run an extensive portfolio of software technologies for years. What's less well known is that it used to have an anti-virus business. The chip giant sold its LANDesk line of anti-virus software to Symantec way back in 1998.

Twelve years on, and Intel has decided to buy into the security software market in order to embed security in a greater range of internet-connected devices, everything from mobile phones to internet-connected TVs.

Mobile malware does exist and with the advent of smartphones has become a slightly more plausible threat. Its volumes are dwarfed by the Windows malware mess, but that doesn't mean there isn't a market for security software on non-PC devices.

Broader topics


Other stories you might like

  • How ICE became a $2.8b domestic surveillance agency
    Your US tax dollars at work

    The US Immigration and Customs Enforcement (ICE) agency has spent about $2.8 billion over the past 14 years on a massive surveillance "dragnet" that uses big data and facial-recognition technology to secretly spy on most Americans, according to a report from Georgetown Law's Center on Privacy and Technology.

    The research took two years and included "hundreds" of Freedom of Information Act requests, along with reviews of ICE's contracting and procurement records. It details how ICE surveillance spending jumped from about $71 million annually in 2008 to about $388 million per year as of 2021. The network it has purchased with this $2.8 billion means that "ICE now operates as a domestic surveillance agency" and its methods cross "legal and ethical lines," the report concludes.

    ICE did not respond to The Register's request for comment.

    Continue reading
  • Fully automated AI networks less than 5 years away, reckons Juniper CEO
    You robot kids, get off my LAN

    AI will completely automate the network within five years, Juniper CEO Rami Rahim boasted during the company’s Global Summit this week.

    “I truly believe that just as there is this need today for a self-driving automobile, the future is around a self-driving network where humans literally have to do nothing,” he said. “It's probably weird for people to hear the CEO of a networking company say that… but that's exactly what we should be wishing for.”

    Rahim believes AI-driven automation is the latest phase in computer networking’s evolution, which began with the rise of TCP/IP and the internet, was accelerated by faster and more efficient silicon, and then made manageable by advances in software.

    Continue reading
  • Pictured: Sagittarius A*, the supermassive black hole at the center of the Milky Way
    We speak to scientists involved in historic first snap – and no, this isn't the M87*

    Astronomers have captured a clear image of the gigantic supermassive black hole at the center of our galaxy for the first time.

    Sagittarius A*, or Sgr A* for short, is 27,000 light-years from Earth. Scientists knew for a while there was a mysterious object in the constellation of Sagittarius emitting strong radio waves, though it wasn't really discovered until the 1970s. Although astronomers managed to characterize some of the object's properties, experts weren't quite sure what exactly they were looking at.

    Years later, in 2020, the Nobel Prize in physics was awarded to a pair of scientists, who mathematically proved the object must be a supermassive black hole. Now, their work has been experimentally verified in the form of the first-ever snap of Sgr A*, captured by more than 300 researchers working across 80 institutions in the Event Horizon Telescope Collaboration. 

    Continue reading
  • Shopping for malware: $260 gets you a password stealer. $90 for a crypto-miner...
    We take a look at low, low subscription prices – not that we want to give anyone any ideas

    A Tor-hidden website dubbed the Eternity Project is offering a toolkit of malware, including ransomware, worms, and – coming soon – distributed denial-of-service programs, at low prices.

    According to researchers at cyber-intelligence outfit Cyble, the Eternity site's operators also have a channel on Telegram, where they provide videos detailing features and functions of the Windows malware. Once bought, it's up to the buyer how victims' computers are infected; we'll leave that to your imagination.

    The Telegram channel has about 500 subscribers, Team Cyble documented this week. Once someone decides to purchase of one or more of Eternity's malware components, they have the option to customize the final binary executable for whatever crimes they want to commit.

    Continue reading
  • Ukrainian crook jailed in US for selling thousands of stolen login credentials
    Touting info on 6,700 compromised systems will get you four years behind bars

    A Ukrainian man has been sentenced to four years in a US federal prison for selling on a dark-web marketplace stolen login credentials for more than 6,700 compromised servers.

    Glib Oleksandr Ivanov-Tolpintsev, 28, was arrested by Polish authorities in Korczowa, Poland, on October 3, 2020, and extradited to America. He pleaded guilty on February 22, and was sentenced on Thursday in a Florida federal district court. The court also ordered Ivanov-Tolpintsev, of Chernivtsi, Ukraine, to forfeit his ill-gotten gains of $82,648 from the credential theft scheme.

    The prosecution's documents [PDF] detail an unnamed, dark-web marketplace on which usernames and passwords along with personal data, including more than 330,000 dates of birth and social security numbers belonging to US residents, were bought and sold illegally.

    Continue reading

Biting the hand that feeds IT © 1998–2022