Like flypaper for malware..
The diary over at the SANS Institute mentioned an interesting program today. Nepenthes is a program that can simulate a vulnerability so that it can collect samples of malware trying to exploit that vulnerability.
They “simulate” a vulnerable system in the sense that on the network it responds to network requests the way a vulnerable computer would and then when the virus transmit it copies and archives the bad bug. The Nepenthes server then scans and submits the file to clamav so that the antivirus program can improve its detection database.
It would seem that something like this might be worth running on a large network. Let’s say you have a network of 100 pcs, this could give you an idea of when an outbreak begins and where it originates. It’s an interesting idea.
Popularity: 1% [?]
Related Posts - 5198 Security Vulnerabilities tracked by US-CERT in 2005 The headline probably says most all... 5198 vulnerabilities tracked by US-Cert in 2005. This comes from The SecurityFix. It's probably not every vulernability that was out in 2005, just those that US-CERT issued advisories for. The breakdown is 812 in Windows 2,328 in various Unix/Linux/Mac/BSD systems and 2,058 affecting multiple......
- Network Security guide for the home or small business network - Part 13 - Your own worst enemy Once upon a time I did an article about the biggest computer security vulnerability ever. I've also passed along the old "the most dangerous part of a car is the nut behind the wheel" joke. If you haven't got it yet, the computer user can be the "weakest link". Let's......
- The biggest computer security vulnerability ever I talk quite a bit about computer viruses and computer security on this site. It's probably one of the bigger problems that I grapple with for my customers. Today I'm going to talk about the biggest computer security vulnerability there is. In fact, this is a general security vulnerability. It......
Related Websites - How To: Find People Online The Social Media Way The following is a guest post by Ann Smarty. She is an SEO consultant blogging on search engine optimization, search engine news and social media. She is also interested in all kinds of (free) Internet tools and apps and loves to discover new unique ideas. With the wealth of social......
- The Secure Enterprise Mobility Conference & Expo Registration is now open for the Secure Enterprise Mobility Conference & Expo on December 8 at the Walter E. Washington Convention Center in Washington, DC. Mark your calendar today and plan to attend this full day event focused on secure mobile implementation for government. Topics include: Enterprise Mobility and Security......
- Social Security's Death Clock Ticks Faster this Year [Today's guest post is by Kosmo, a man with more irons in the fire than your local iron incinerator. He recently launched a consulting business (Sparks by Kosmo) and announced plans to publish a book on the lives of sports card collectors. Today, as he pursues a run at the......
Similar Posts
- Clamav 0.88.4 and prior DoS
- Clamantivirus may get support from eEye?
- WMF vulnerability checker
- New Beagle/Bagle variant?
- Antivirus vs. WMF exploit