Arbor Networks to Speak on Botnet Tracking at Virus Bulletin 2006.MONTREAL -- Arbor Networks WHO: Jose Nazario, Senior Security Engineer, Arbor Networks[R] WHEN: October 12, 2006 10:40 - 11:20 a.m. EST EST electroshock therapy. EST abbr. electroshock therapy WHERE: Fairmont The Queen Elizabeth Queen Elizabeth, or Elizabeth, may refer to: Living people
Bohemia Montreal, Quebec, Canada http://www.virusbtn.com/conference/vb2006/index TOPIC: Botnet tracking techniques and tools DESCRIPTION: Botnets have quickly become one of the chief dangers to large-scale Internet security ''This article or section is being rewritten at Internet security is the process of protecting data and privacy of devices connected to internet from information robbery, hacking, malware infection and unwanted software. , threatening nearly every Internet user Internet user n → internauta m/f Internet user Internet n → internaute m/f and even the very infrastructure itself. Unlike traditional malware such as viruses and worms, the structure of a botnet creates the opportunity to perform direct measurements and observation. The common tools to perform these measurements are usually written quickly and may or may not work for long periods of time, especially if the botnet owner is vigilant about checking for lurking See lurk. (messaging, jargon) lurking - The activity of one of the "silent majority" in a electronic forum such as Usenet; posting occasionally or not at all but reading the group's postings regularly. hosts. Furthermore, most botnet studies published thus far have focused on studying captured malware samples outside of the network or have been carried out using honeypot A server that is configured to detect an intruder by mirroring a real production system. It appears as an ordinary server doing work, but all the data and transactions are phony. Located either in or outside the firewall, the honeypot is used to learn about an intruder's techniques as hosts. Neither of these techniques provides a full picture of the botnet landscape. To study larger amounts of information about the botnet community, Arbor Networks has developed simple tools and techniques to examine large numbers of botnets for long periods of time. Arbor's findings reveal how botnet operators manage their networks, what they are doing with the infected hosts, and the skill levels required to create such botnets. The results of this research illustrate how lucrative the botnet community is, how easy it is to get started, and how dangerous it can be for the Internet community at large. ABOUT ARBOR NETWORKS Arbor Networks[R] ensures the security and operational integrity of the world's most critical networks. Arbor's solutions are based on the proven Peakflow[R] platform, intelligent technology for network-wide data collection, analysis, anomaly detection An approach to intrusion detection that establishes a baseline model of behavior for users and components in a computer system or network. Deviations from the baseline cause alerts that direct the attention of human operators to the anomalies. See IDS and anomaly. , and threat mitigation. Peakflow provides real-time views of network activity enabling organizations to instantly protect against worms, DDoS attacks, insider misuse, and traffic and routing instability as well as segment and harden networks from future threats. Peakflow successfully prevents costly downtime, network cleanup, and loss of customer confidence. Arbor is headquartered in Lexington, MA, with a research and development office in Ann Arbor Ann Arbor, city (1990 pop. 109,592), seat of Washtenaw co., S Mich., on the Huron River; inc. 1851. It is a research and educational center, with a large number of government and industrial research and development firms, many in high-technology fields such as , MI and overseas headquarters in London and Beijing. Arbor Networks, the Arbor Networks logo, Peakflow, and ArbOS are registered trademarks of Arbor Networks, Inc., and Security to the Core. Performance to the Edge., is a trademark Arbor Networks, Inc. All other trademarks are the property of their respective owners. ABOUT VB CONFERENCE The VB conference provides a focus for the AV industry, representing an opportunity for experts in the anti-virus arena to share their research interests, discuss methods and technologies and set new standards, as well as meet with - and learn from - those who put their technologies into practice in the real world. No longer focusing exclusively on computer viruses and malware threats, the programme has been expanded to cover topics relating to relating to relate prep → concernant relating to relate prep → bezüglich +gen, mit Bezug auf +acc spam and anti-spam techniques. Delegates range from dedicated AV researchers to security experts from government and military organizations, legal, financial and educational institutions and large corporations worldwide. |
|
||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion