Archive for the ‘Anti Virus’ Category

Quantifying current state of cybercrime

February 17, 2011

Just two weeks ago, we all saw the end of an era when DHS annouced that the color coded threat system will be phased out and replaced with new system known as National Terrorism Advisory System.

Today, Norton released Cybercrime Index, which quantifies the state of cybercrime and converts danger level into a simple number. Is it beginning of a new era?

At the top level, the CyberCrime Index takes this data and creates a number evaluating the relative risk of the threats of the day. However, it also provides a more in-depth look at active threats, threat trends, and provides advice on what kinds of behaviors are being most heavily targeted that day.

Signature-less zero-day game-changer

January 31, 2011

Last week ComputerWorld reported that Intel was developing a technology (most probably, a Chip) that will stop ALL zero-day attacks. Wow…that’s like, finding solution for global recession, religious conflicts, or terrorism problems. I am not being sarcastic; I intentioanlly took these examples because they fall into the same bucket as zero-day threats – i.e., we can’t predict when these events will occur and how deep the impact will be.

I respect Mr. Rattner, who was named one of top 200 individuals having the greatest impact on the U.S. computer industry back in 90s, and I am sure he is up to something big but if what he said comes true it’ll be HUGE!

We’re going to see a quantum jump in the ability of future devices, be them PCs or phones or tablets or smart TVs, to defend themselves against attacks.

….the technology won’t be signature-based, like so much security is today. Signature-based malware detection is based on searching for known patterns within malicious code. The problem, though, is that zero-day, or brand-new, malware attacks are often successful because they have no known signatures to guard against.

We’ve found a new approach that stops the most virulent attacks. It will stop zero-day scenarios. Even if we’ve never seen it, we can stop it dead in its tracks.

Still, I’d have preferred the article heading more like how Paul Ducklin put it, <quote> It’s a pity that Intel’s work has been touted in such hyperbolic fashion. Headlines like “Intel to add new low-level layer of computer security” would, surely, have been much more meaningful. <unquote>

Computer Takeover Alert!

January 20, 2011

Will this stop the multiplication of bots?

Online customers, he said, may not want their service provider to cut off their Internet access if their computer is infected. And they may balk at being forced to keep their computers free of botnets or infections.

But they may be amenable to having their Internet provider warn them of cyberattacks and help them clear the malicious software off their computers by providing instructions, patches or anti-virus programs.

They may even be willing to pay a small price each month for the service – in much the same way that telephone customers used to pay a minimal monthly charge to cover repairs.

Geo Location Based DDoS Attacks

October 30, 2010

An interesting analysis of an old article on Geo Location based DDOS attack targeting Mobile Operators and why it isn’t as simple as it looks -

In order for a DDoS attack to succeed, you need a high volume of attack (‘zombie’) devices.

In a Geo Location DDoS you attack something which is at one geographic location, so zombie phones need to be at or around the target location.

This means that you need to persuade a lot of people to install the attacking app needs on their phones.

The Top Cyber Security Risks Report

September 26, 2010

HP recently published second edition of the annual Top Cyber Security Risks report containing in-depth analysis and attack data from TippingPoint DVLabs, vulnerability data from Qualys and additional analysis provided by the Internet Storm Center and SANS.

The report focuses on four key areas:
• Increased Consumerization of Enterprise Computing
• Prolonged and Persistent Targeting of Web Applications
• Increased Organization and Sophistication of Attackers
• The Unrelenting Presence of Legacy Threats

Symantec’s views on the rise of PDF malware

September 26, 2010

We all know how Adobe has beaten Microsoft in number of security vlunerabilities and joined Microsoft’s Patch-reporting program to share details on its latest patches. This is posing new challenges for security admins. Symantec recently published a report to discuss the current PDF threat landscape

PDF attacks are on the rise worldwide and show no indication of slowing down. Modern exploit packs have made it relatively simple to create an effective PDF attack. The popularity of these exploit packs along with the success that attackers have been enjoying using PDFs has lead to an explosion in the use of malicious PDFs as an attack vector.

Anti-virus or Virus

April 26, 2010
McAfee released a faulty update which impacted some enterprise customer and consumer base–home users of products globally. Per McAfee -
The error can result in moderate to significant issues on systems running Windows XP Service Pack 3.The immediate impact on corporate users was lessened for corporations who kept a feature called “Scan Processes on Enable” in McAfee VirusScan Enterprise disabled, as it is by default, though those customers could also be impacted when running a scan.

Follow

Get every new post delivered to your Inbox.

Join 994 other followers