Intology - Intelligent Technology News
Computers Technology Internet Arts Business Science Sports


Beware of malwares that can dodge anti-virus

May 15th, 2008 by Kiyani ~ No Comments

According to Marc Henauer, head of the cyber-crime division at the Swiss Justice and Police Department, new types of malware and virus are hitting the web that is making it difficult for anti-virus and other security softwares to detect.


He said in an interview last week that viruses and other malware now have the capability to change their signature every few hours. This new developments in malware is allowing attackers to stay one step ahead of security software.

Geoff Sweeney, chief technology officer at Tier-3, a behavioural analysis IT security firm, was also of the opinion that because of this signature change these malwares are able to dodge anti-virus easily.

Self-changing code designed to dynamically evade recognition is a fact of life. It automatically adapts to the anti-spam and anti-malware engines that it encounters.

He said.

Because programs and code used to create this shape-shifting threat are now readily available this is unleashing a wave of malware based on social engineering techniques.

According to Sweeney:

Highly targeted emails containing personalized information and shape-shifting Trojan attachments are the latest development. Each positive infection increases the ‘hit rate’ for the next wave of emails sent out by the self-learning automated engines used by sophisticated attackers.

He believes that to effectively counter these types of malwares a non rules-based monitoring process is required that willl defend all ingress and egress points covering SMTP, DNS, HTTP(s), IM etc.

Once this is in place, defence against shape-shifting threats becomes possible as does the removal of any previously established covert data leakage channels that will be revealed and dealt with.

he concluded.

Tags: Computers/Internet ~ Science/Technology

0 responses so far

  • There are no comments yet...Kick things off by filling out the form below.

You must log in to post a comment.

 

Recent Entries

RSS Subscription


    Add to Google  



                OR

    Enter your email address:

    Delivered by FeedBurner

Archives

External Links