Infocus: Detecting Worms and Abnormal Activities with NetFlow, Part 1
98494
This paper discusses the use of NetFlow, a traffic profile monitoring technology available on many routers, for use in the early detection of worms, spammers, and other abnormal network activity in large enterprise networks and service providers.
469986
The Bagle worm shifts shape to outsmart antivirus software. Plus: Media player patches and Feds' fraud crackdown.
710136
This paper looks at the evolution of firewall technology towards Deep Packet Inspection, and then discusses some of the security issues with this evolving technology.
496843
Technique claims to be able to stop Internet worms within milliseconds of an outbreak.
663936
bulk messages clogging instant-messaging accounts. AOL and its Anti-Spam Alliance partners -- EarthLink, Microsoft, and Yahoo
466917
This third and final article in the Metasploit series covers the msfcli scripting interface as well as the intuitive web interface to the Framework. The article also discusses what's new with version 2.2, and then introduces the exploit development process through an example.
433186
Spyware problems continue to rise. Congress is stepping up to the plate--but will its efforts be more effective than CAN-SPAM?
405731
A security researcher demonstrates a way to use cross site scripting to remotely spam an internal network printer.
189361
Program isn't entirely benevolent: it also downloads files to infected PCs.
409660
Tzvetan Ceco Chaliavski's workday begins just like most people's, with a check of his e-mail. But his inbox often contains more than 400 warnings and samples of viruses, worms and all manner of malware.
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
284802
Fast, intelligent, automatic spam detector using Paul Graham style Bayesian analysis of word counts in spam and non-spam emails. Filtering adapts to personal tastes automatically. No manual rule creation required. This release adds the final missing pieces to the new parser code.  MBX files and Content-Length headers are now supported.  Database cleanup when signals are caught has also been improved.  I would like to move 1.1 into the stable branch fairly soon so if folks would test out this release and report any problems it would be a big help!   The latest release can be found here: https://sourceforge.net/project/showfiles.php?group_id=61201&package_id=73566
519943
those nasty viruses, worms and Trojan Horses that have, on more than one occasion, crippled PCs. No doubt about that. The question is: Will they be as bad?
721903
On 20 December 2004, a fast-moving Internet worm called Santy began attacking Web servers using the popular Google search engine. The Santy worm exploits a security vulnerability in phpBB, an open-source bulletin
209279
A Download.Ject-style worm which spreads through instant messages is spreading across the Net, according to intrusion prevention firm PivX.
236348
At least one new variant of a worm spread rapidly from Asia and Europe to US computers, filling up people&#39;s email accounts, but otherwise causing little apparent damage.
49443
Computer worms raced around the world, leaving behind tools that spread spam. Scammers sent e-mail to trick bank account holders into revealing passwords. Rogue programs known as "spyware" hijacked Web browsers and crippled computers.