Bot Battle Brewing

Discussion in 'malware problems & news' started by ronjor, Aug 17, 2005.

Thread Status:
Not open for further replies.
  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,926
    Location:
    Texas
    Story
     
    ronjor, Aug 17, 2005
    #1
  2. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    Interesting link from that article, Ron:

    Bots Break Into 175 Companies In Year's Biggest Attack

    Quote Oliver Friedrichs, the senior manager of Symantec’s security response team:

    "Anti-virus software is certainly effective once a threat has been identified, but an intrusion prevention system would have prevented this out the door, since they look for attacks against the vulnerability, not for a specific exploit."

    -rich
    ________________
    ~~Be ALERT!!! ~~
     
    Rmus, Aug 17, 2005
    #2
  3. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,926
    Location:
    Texas
    I noticed that Kerio is offering host intrusion protection in their firewall.

    "HIPS" looks to be the buzzword for awhile. :D
     
    ronjor, Aug 17, 2005
    #3
  4. dog

    dog Guest

    Kerio's HIPS feature is buggy at best
     
    dog, Aug 17, 2005
    #4
  5. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,926
    Location:
    Texas
    Didn't mean to take this thread off topic. :)
     
    ronjor, Aug 17, 2005
    #5
  6. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    In looking at this and other articles in the past few days, many of the "experts" interviewed agree that these attacks could have been prevented if the users:

    1) had a properly configured firewall

    2) had some type of intrusion protection

    3) had installed Microsoft patches


    -rich
    ________________
    ~~Be ALERT!!! ~~
     
    Rmus, Aug 17, 2005
    #6
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...