funsec mailing list archives

PSU Security Researchers Tout Zippier Way to Squash Computer Worms


From: "Fergie" <fergdawg () netzero net>
Date: Sat, 10 Feb 2007 01:02:01 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nothing really new here, but FYI...

Via NetworkWorld.

[snip]

Penn State University researchers have created technology they say can nab
computer worms more quickly than traditional signature-based systems and
speedily set free the traffic if it's determined to be harmless after all.

The Proactive Worm Containment technology watches for a packet's rate and
diversity of connections to other networks to identify worms, rather than
having to wait around for a signature to be generated to spot new malware.

[snip]

More:
http://www.networkworld.com/news/2007/020907-security-researchers-squash-wo
rms.html

Link to paper:
http://www.personal.psu.edu/faculty/p/u/pum10/sace.pdf

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFFzRmGq1pz9mNUZTMRAno4AKCblU7jXNwbu7PXvqptHAIA6fdLHQCgttZU
x4KHTLmaV9LEFiuuxRuzpRk=
=Vgwq
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: