Where to get for research?

I would really like to start specializing is security. So for someone like myself needing to get started, where can I 'safely' get copies of the most commonly found trojans/backdoors? I would like to setup a lab/research environment (not connected to the net!)

 

Specializing in security is not done by doing research on live malware. Malware is just software. So if you're a great programmer and if you can create decent software, you're a qualified security expert that area.

Security is in people, in processes, in awareness. Nothing else

 

LowWaterMark,
ok. Understandable rule. I was just hoping to avoid the 'problems along the way' if possible by getting the stuff from a research type environment.

meneer,
I assume you think I'm some kid looking to cause trouble by your little angry face there. In short, security is in people, processes and awareness. I agree. But thats certianly not it. I've yet to meet a programmer that actually follows good security guidelines all the time. So as someone in a network admin role, or a security analyst, doing penetration testing and so forth, you certianly WOULD need hands on experience researching this 'malware'. Learn how to detect and stop it by learning how it works. from your post: 'so if you're a great programmer and if you can create decent software, you're a qualified security expert that area' uh. yeah. right. You are way off.



and you 've made me late because I had to reply! hehe. Have a nice weekend

 

I know. I've had to clean my inlaws machine several times before finally getting around to installing a firewall for them (kid uses kazaa). But like I said before, I was hoping to find a trustworthy/safe place to get them for research/study purposes. I really want to setup a lab environment to learn more about them. I'm a geek like that

I know that probably sounds funny, a 'safe' place to get 'unsafe' software! hehe. Oh well. I'll just have to take my chances.

thanks for the reply though.

p.s. just occured to me that even if I set myself up to purposefully get infected I won't get all that I need. For example RATs have a client and server piece. I won't get the client. Plus, I'd be a bad internet citizen if I just put an unprotected host out there to be exploited... and probably contribute to spamming and/or ddos.

 

looks like you answered your own question

 

There's no 'probably' about it: you'd be zombied so fast you'd make George Romero's (?? - Day of the Living Dead, etc.) head spin!