pixel_dreams - Fotolia
Virtual desktop vulnerability to malware varies depending on how organizations configure the desktops, but generally they are less prone to malware attacks than traditional PCs.
Virtual desktops are typically hardened to the greatest extent possible. This means if a user comes into contact with malware, the virtual desktop's security configuration would likely make it impossible for the malware to do any harm.
Still, administrators should equip the servers hosting the virtual desktops with antimalware software to prevent malware from penetrating there. Most thin client devices don't need malware protection, but PCs repurposed as thin clients run thick operating systems that could be vulnerable to attacks so those should have malware protection installed as well. Lastly, any Web browser installed on the virtual desktops should be configured to prevent unauthorized add-ins.
One of the main reasons virtual desktops are less prone to malware attacks than traditional desktop PCs is because it's easier to keep them up to date. Think about what it takes to patch and maintain a large number of physical PCs. In recent years, automated maintenance on PCs has become a lot more practical, but it's still anything but perfect. A desktop agent may malfunction. A user may override an impending reboot because she considers it to be disruptive. A number of things can make it more complicated for administrators to ensure they're properly maintaining their physical desktops. As a general rule, it is easier for admins to maintain virtual desktops, because they can change configurations and add updates via the golden image for several virtual desktops rather than updating physical desktops individually.
Finally, most of the virtual desktops in use today are nonpersistent. This means that the virtual desktops reset themselves to a pristine state at the end of each session. Several nonpersistent desktops are usually spun up from the same master image, but end users -- and any malware they run into -- can't affect that base image from their virtual desktop. If a nonpersistent virtual desktop became infected by malware, it would remove the malware at the end of the user's session when it resets.
Why federal agencies approve of VDI security
Guide to desktop monitoring tools
Some malware adapts to virtual machines
Dig Deeper on Virtual desktop management
Related Q&A from Brien Posey
Although several newer tools are available, Microsoft roaming profiles is a simple and time-tested way to manage a user's profile across physical and... Continue Reading
SaaS application backup is increasingly prevalent, and for good reason -- it's critical for ensuring data protection. These five guidelines will help... Continue Reading
Admins may need to open the BIOS or UEFI interface to change BIOS passwords on Windows 10. This process isn't too complex, but IT pros should follow ... Continue Reading