IMlogic unveils IM, P2P threat-detection network
642300
DECEMBER 07, 2004  - IMlogic Inc. and several partners today unveiled a new instant messaging &quot;threat center&quot; clearinghouse aimed at fighting IM viruses, malicious software code and spam before they occur.
22051
A researcher at ShmooCon on Saturday demonstrated how browser hotkeys can expose the internal network running behind a Citrix presentation server.
255713
SafeNet Inc., a global leader in information security, today announced  that its MediaSentry Business Intelligence (BI) services portfolio will  now feature the world's first direct  measurement of user activity across the most heavily trafficked  peer-to-peer (P2P) networks globally.
54799
A group of Internet security and instant messaging providers have teamed up to detect and thwart the growing threat of IM and peer-to-peer viruses and worms, they said this week.
193215
They're not just for file-sharing anymore: P2P networks are transmitting phone calls, blocking spam, backing up hard drives, and spreading scholarship.
688153
Will it become redundant in the face of encryption and protection on endpoints in an open network?
449182
Multiple vulnerabilities have been reported in version five of the widely-used Kerberos authentication protocol. The most serious could be exploited by crackers to gain root control to authentication servers.
752268
It's expected to analyze threats in real time and better report on Internet activity over time on enterprise networks.
386604
This article discusses the discovery of compromised machines in large enterprise environments, and offers some suggestions on correlating NIDS and HIPS logs to avoid false positives.
309307
Newly updated. This article provides insight into the Metasploit Framework, a very useful tool for the penetration tester. Part two of three.
503421
(InfoWorld) - Malware-infected botnet PCs have overtaken denial-of-service attacks as the top security issue facing Internet service providers and other Web infrastructure hosting players, according to a new survey of the organizations. Arbor Networks published the results of its third-annual Infrastructure Security Report on Monday -- a survey of 75 large ISPs, hosting companies, and other providers -- which found for the first time that botnets currently outrank DoS threats as the most serious concern for the firms. Tens of millions of PCs are likely infected with botnet programs worldwide, according to survey results, and Arbor researchers said the ISPs they questioned admitted to spending more time and resources battling botnets than ever before. Infrastructure providers are finding botnets hard to pin down, as the people responsible for controlling the zombie machines are increasingly employing more advanced detection evasion techniques, said Craig Labovitz, chief scientist at Arbor. As they can't accurately gauge the size of the problem, he said, infrastructure providers are afraid they're only scraping the tip of the iceberg in taking on the botnet phenomenon. "ISPs are spending a lot of time trying to measure, and there's a lot of subjective data, but there are such widely different qualities to the various bots that it's a real challenge to get any strong metrics," Labovitz said. "We are seeing a widening separation between the pros and the amateurs, but as easy as it is to infiltrate and measure the less sophisticated botnets, the pro grade stuff is far more problematic and harder to trace." By using the same peer-to-peer botnet propagation strategy that has made the so-called Storm worm a recurring problem in terms of generating subsequent infections, the sophisticated sect of the botnet community is moving forward at a rapid pace, according to Arbor. In eliminating the need for traditional botnet command and control centers using P2P techniques to distribute the threats, the attackers have also removed the most efficient place to attempt to take down the attacks, the researcher said. At the same time, denial-of-service (DoS) attacks -- which have long-ranked as the primary concern of ISPs and their brethren -- have not disappeared, but rather become more targeted and efficient in the application of their resources, making them even more damaging to their individual targets, according to the report. Labowitz said that while a traditional distributed DoS threats have measured at under 10GB, newer DoS attacks are reaching as high as 24GB -- enough to completely shut down a smaller ISP or Web server farm. As the attacks are getting more powerful, they are also being concentrated on smaller groups of individual targets, or groups of sites, versus being unleashed to the Internet at large. In one such situation just last week, Labowitz said, an unnamed gambling site was taken offline for a number of hours. "For the most part, if you read the press you don't hear about DoS as much, so people jump to the conclusion that it's not happening. But it's still out there," said the researcher. "The attacks may only be targeted at a small group of sites, but that can also help to increase the significance of the impact to the provider involved based on the more narrow focus." Despite the lingering threat of DoS, ISPs have become better equipped at warding off the attacks and protecting their customers, and often times have begun charging for premium services to address the issue, according to Arbor. As opposed to five years ago, when infrastructure players often had to scramble to respond to DoS campaigns as they emerged, Labowitz said most sizeable companies now have appropriate procedures and equipment to at least partially deflect the assaults. "Even though 90 percent of the attacks are a soft threat at this point, some of those remaining attacks are bigger than anyone can handle easily -- even some of the big guys," said Labowitz. Arbor predicts attacks on Internet telephony services will represent one of the next immediate pain points for infrastructure players. Only 20 percent of the companies surveyed for the report said they had any gear in place to detect VoIP threats. Only 11 percent reported that they had any plans or tools in place to mitigate VoIP-based attacks. "We haven't seen many of these threats yet, but we know the proof-of-concepts are out there," said Labowitz. "With the amount of VoIP infrastructure that is being deployed, the ISPs and telephony providers will need to ensure that they have something in place to protect those networks from attack."
672370
Protego focuses on security monitoring and threat management appliances for enterprises and small- and medium-sized businesses (SMBs), and according to a statement from Cisco, it is Protego&#39;s products&#39; abilities to detect, correlate and mitigate threats
231993
IMlogic Inc. on Tuesday announced plans to use honey pots to track malicious virus activity on instant messaging and peer-to-peer networks.
30901
A tsunami detector built from ordinary PCs linked over a peer-to-peer network has been demonstrated in Austria.
3787
Today's blog post discusses methods with which a non-technical user can secure their own instant messaging conversations such that an attacker is unable to listen in (be they the government or a nosy neighbor sniffing the wireless network from next door).
200433
An enhanced multi-threaded syslogd, supporting reliable syslog over TCP and RFC 3195, writing to MySQL databases, fully configurable output formats (with great timestamps), ability to filter on anything, and on-the-wire message compression.   Hi all,  Rsyslog 3.11.2 has just been released. Now it has the ability to convert text files into syslog. This is done by the imfile plugin, which monitors text files. A new libdbi-based output plugin has been written. This adds six additional databases (including Firebird and Oracle) to the supported database set. Also contains small bug fixes. Version 3.11.2 is a recommended release for all version 3 users.  Doc for new Modules:    http://www.rsyslog.com/doc-omlibdbi.html    http://www.rsyslog.com/doc-imfile.html  Changelog:    http://www.rsyslog.com/Article175.phtml  Download:    http://www.rsyslog.com/Downloads-req-getit-lid-79.phtml  I hope this release is useful. As always, feedback is appreciated.  Best regards, Rainer Gerhards
276609
IMlogic and other security vendors announced a consortium Tuesday to fight IM and P-to-P (peer-to-peer) viruses, worms and unwanted spam.