F-Secure CEO: There's more malware than ever
Kimmo Alkio, CEO of F-Secure, recently rejoined the antivirus vendor from fellow Finnish company Nokia. silicon.com recently caught up with Alkio to discuss the security landscape, how governments should handle hackers, the need for a dot-bank domain name …
Context & Ripple Effects
Kimmo Alkio has just taken the F-Secure chief executive seat, returning from Nokia to the Finnish antivirus vendor he now leads into a threat landscape his own company describes as worse than it has ever been. His diagnosis lines up with the December 2006 reporting that malware had shifted toward a quantity-up, quality-down model: fewer bespoke attacks, vastly more samples flooding in.
Two proposals anchor the interview beyond the headline warning — that governments need a workable stance on hackers, and that a dedicated dot-bank top-level domain could give online banking a trusted namespace. Both put F-Secure's new CEO on the record as a policy advocate, not just a product seller.
First-order effects
- For F-Secure, the volume surge makes detection-lab throughput and rapid sample processing the core competitive asset, since high-volume low-quality malware punishes vendors who rely on slow, hand-crafted signatures.
- Alkio's dot-bank pitch lands on domain registries and banking regulators as a live proposal they now have to evaluate or publicly dismiss.
Second-order effects
- If a verified sector-specific TLD like dot-bank gained traction, banks would face a migration-versus-fraud-loss calculation over rebranding their web addresses, and registrars would be pushed to build identity-verification tiers for premium domains.
- Rival antivirus vendors come under pressure to match F-Secure's framing of an escalating-volume market, since a vendor seen as understating the threat loses urgency-based sales.
Third-order effects
- The pattern points toward security economics built around automated triage and reputation filtering rather than per-threat craftsmanship, restructuring which vendors can profitably compete as attack volume scales.
- If sector-restricted domains catch on, domain governance bodies acquire a de facto authentication role, making internet naming policy a standing instrument of financial-security regulation.
The trend: Malware is shifting from scarce, high-craft attacks to industrial-scale commodity volume, pulling vendors toward automated defenses and regulators toward trust-gated namespaces like dot-bank.