Archive for the 'Computer Security' Category

Autograph Toward Automated, Distributed Worm Signature Detection

Introduction and Motivation
In recent years, a series of Internet worms has exploited the confluence of the relative lack of diversity in system and server software run by Internet-attached hosts, and the ease with which these hosts can communicate. A worm program is self-replicating: it remotely exploits a software vulnerability on a victim host, such that the victim becomes infected, and itself begins remotely infecting other victims. The severity of the worm threat goes far beyond mere inconvenience. The total cost of the Code Red worm epidemic, as measured in lost productivity owing to interruptions in computer and network services, is estimated at $2.6 billion [7].

Models of Internet Worm Defense

Content Filtering
We consider two schemes analyzed by Moore et al. “Requirements for Containing Self-Propagating Code”
Content filtering—Idea is that worm packets look a lot alike. One can find
signatures based on hashes of packet content to recognize I’m told that actual commercial products exist that do this Our model : after a delay T0, worm scans are recognized by packet content.
Filters at local network boundaries protect those networks. Fraction fopen of hosts have “open path” to attack still.
Phase I – the worm spreads before detection.
Phase II – the susceptible population drops from s(T0) to
(1 – fopen) × s(T0), dynamics otherwise are the same.

Address Blacklisting
Address Blacklisting—likely infected hosts are added to blacklists. Fraction fopen hosts remain unprotected.
Our model :
Detection delay T0 of infected host, detection framework started at time
D0
Phase I—original spreading dynamics
Phase II—At time D0 + T0 blacklisting takes effect. Split populations into
that which is covered by blacklisting (sp) and that which is unprotected
(su): At time D0 + T0:

eTrust Antivirus Groupware Options User Guide

Using an electronic messaging system is a common way for today’s corporations to communicate. Quite often, the messaging system becomes an essential method for sharing information and documents, both within and outside of the enterprise. Unfortunately, these same systems can have gaps in security that enable infections to rapidly spread through an organization—posing risks to both data and productivity.

According to an International Computer Security Association (ICSA®) survey, email attachments are the most common sources of infections. Macro viruses, worms, and other malicious code can come in through email to slow down and debilitate your system. For example, infectors such as the Winword Concept macro virus and the Melissa virus have become among the fastest spreading viruses in history. According to the ICSA, the well-known LoveLetter virus is a mass-mailer, and therefore has the potential to spread quickly. The virus arrives as a VBS file attached to an email message.

Iraqi Militants Breach $45 Million Drone Content Stream Using SkyGrabber

This has to be the best article that I have gotten to write yet, and simply because it comes as proof once again that hyper-expensive technology is absolutely no match for the basic primordial Windows applications. Well, we all know that hackers use to breach high security servers and such, with just the use of simple software like telnet and other, but I don’t think you can even imagine the hilarity of what is to follow.

I can’t seem to find the right words, but “the humanity” can be suitable enough, for the fact that the Iraqi militants managed to breach the video streaming feeds of the Predator surveillance drones using nothing more than a simple Windows application. Those are not even hackers, and the software used was just a simple data-leeching utility that, combined with a PC and a satellite dish, needs just a few parameters, like Packet IDs and transponder codes (that you can easily scan for), for tapping into downstream data feeds, and basically record whatever data is being transmitted to other users on a satellite network.

iPad User Guide for Cisco AnyConnect Secure Mobility Client

This document describes the Cisco AnyConnect Secure Mobility Client 2.4.4 for Apple iOS. It includes the following sections:

  • Introduction
  • Devices Supported by Cisco AnyConnect 2.4.4
  • New Features and Fixes Since AnyConnect 2.4.2
  • What You Need Before You Can Set Up AnyConnect
  • Installation
  • Getting Started
  • Adding a VPN Connection Entry
  • Setting Up Connect-On-Demand Rules
  • Modifying a VPN Connection Entry
  • Deleting a Connection Entry
  • Connecting to a VPN
  • Viewing Overview Statistics
  • Viewing Detailed Statistics
  • Viewing and Managing Log Messages
  • Changing the Theme
  • Displaying the AnyConnect Version and Licensing Details Responding to “Another Application has requested that AnyConnect…Do you want to allow this?”
  • Troubleshooting

Introduction

The Cisco AnyConnect Secure Mobility client for Apple iOS provides seamless and secure remote access to enterprise networks. The client allows any installed application to communicate as though connected directly to the enterprise network.

AVG 8.0 File Server Edition User Manual

AVG Installation Requirements
1. Operation Systems Supported
AVG 8.0 File Server is intended to protect fileservers with the following operating systems:

  • Windows 2000 Server SP4 + Update Rollup 1
  • Windows Server 2003 (x86, x64 and Itanium) SP1 (and possibly higher service packs for specific operating systems)

2. Minimum Hardware Requirements
Minimum hardware requirements for AVG 8.0 File Server are as follows:

  • Intel Pentium CPU 1.2 GHz
  • 70 MB of free hard drive space (for installation purposes)
  • 256 MB of RAM memory

3. AVG Installation Options
AVG can be installed either from the installation file available on your installation CD, or you can download the latest installation file from the AVG website (www.avg.com).
Before you start installing AVG, we strongly recommend that you visit the AVG website to check for a new installation file. This way you can be sure to install the latest available version of AVG 8.0 File Server.
During the installation process you will be asked for your license/sales number. Please make sure you have it available before starting the installation. The sales number can be found on the CD packaging. If you purchased your copy of AVG on-line, your license number will have been delivered to you via e-mail.