Jump to content
Sign in to follow this  
cpl_BOB

"were doomed"  doomed i tellz you!

Recommended Posts

Virus BLITZKRIEG!!

Security researchers warn of worm blitzkriegs

By John Leyden

Security researchers are warning of the availability of more powerful virus writing techniques, which call for a more co-ordinated approach to combat next generation worms.

In a paper, How to 0wn the Internet in Your Spare Time, Stuart Staniford of Silicon Defense, Vern Paxson of the ICSI centre for internet research and Nicholas Weaver of University of California Berkeley, argue the ability of attackers to rapidly gain control of vast numbers of Internet hosts poses grave security risks. They suggest surreptitious worms, which spread more slowly but are much harder to detect, "could arguably subvert upwards of 10,000,000 Internet hosts".

On a different track they suggest worm writing techniques which could be used to create ultra-virulent worms capable of spreading so quickly that they outflank anti-virus defences. Among the techniques are hit list scanning (which creates a Warhol worm - capable of infecting numerous hosts in 15 minutes), permutation scanning (which enables self co-ordinating scanning), or flash worms (which use enormous hit lists).

Once worms have succeeded in compromising hosts they might be used in denial of service attacks, to steal sensitive information or even destabilise the Internet, according to the researchers.

The analysis is based in large part on a mathematical analysis of the spread of the Nimda and Code Red worms. The risk from the Code Red worm were greatly hyped at the time, but that's not to say that the warning of the researchers is wildly misplaced.

Every time a new virus is released it takes time to spot it, time for AV vendors to develop an antidote and time to distribute this antidote (virus signature definition file). At the industry's annual get together, Virus Bulletin, in Prague last year, concerns were expressed that this approach is in danger of becoming obsolete.

Improvements in the speed of antivirus analysis and management tools are continuing but can only go so far. Meanwhile virus writing s'kiddiots are taking full advantage of the Internet to spread their wares.

Staniford, Paxson and Weaver argue that the possible use of ultra-virulent worms calls for the cyber equivalent of the Centers for Disease Control and Prevention in the US, and they sketch out the role and functions of such an organisation.

The paper will form the basis of a more detailed presentation to be given at the Usenix Security Forum in August. ®

Share this post


Link to post
Share on other sites

if someone can write such worm/virus, then he/she must be good, which means that there are only few around...so if that ever breaks out, we can see that some group of ppl might be the culprit.

Share this post


Link to post
Share on other sites

My   c tounge.gif mp tounge.gif t tounge.gif r   h tounge.gif s   n tounge.gif v tounge.gif r   b tounge.giftounge.gif n   tounge.gif nf tounge.gif ct tounge.gif d   by   tounge.gif   v tounge.gif r tounge.gif s   tounge.gif xc tounge.gif pt   f tounge.gif r   tounge.gif n tounge.gif   t tounge.gif m tounge.gif ,   by   th tounge.gif   "V tounge.gif w tounge.gif l   D tounge.gif s tounge.gif mb tounge.gif w tounge.gif l"   w tounge.gif rm.

Share this post


Link to post
Share on other sites

wow.gif3--></span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td>Quote (RalphWiggum @ May 30 2002,11wow.gif3)</td></tr><tr><td id="QUOTE">Lredbounceflame.gift's sredbounceflame.gifredbounceflame.gif whredbounceflame.gift mredbounceflame.gifds thredbounceflame.gifnk redbounceflame.gifbredbounceflame.gifredbounceflame.gift thredbounceflame.gifs.<span id='postcolor'>

Thhappyface.gifshappyface.gif  bhappyface.giffhappyface.gifhappyface.gifns?   Whhappyface.gif   chappyface.gifrhappyface.gifs   whhappyface.gift   thhappyface.gify   thhappyface.gifnk!

pirate.gif

Share this post


Link to post
Share on other sites

</span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td>Quote (Stealt Eagle @ May 30 2002,13:28)</td></tr><tr><td id="QUOTE">I think some of u guys must have dl the Hemp addon for OFP and taken a deep breath<span id='postcolor'>

Nscuba1.gifvscuba1.gifr   tscuba1.gifscuba1.gifch   thscuba1.gif   stscuba1.gifff.

Share this post


Link to post
Share on other sites

Virus writers should be publicly hung by the balls till they rot. That should be an effective anti-virus

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×