15
Malware Security The latest trends in virus writing: What the hacker is after.

Malware Security

Embed Size (px)

Citation preview

Page 1: Malware Security

Malware Security

The latest trends in virus writing:What the hacker is after.

Page 2: Malware Security

Virus History

• In the early days of viruses and anti-virus technology, the focus of viruses was on disruption. Some of the early viruses were written from a revenge perspective – a disgruntled employee seeking revenge on his employer was a common reason.

Page 3: Malware Security

Virus History, continued

• Another early reason for writing viruses was to gain notoriety within the hacker community and the general public. A well written virus could potentially attack thousands of systems and cause several thousands of dollars of damage.

Page 4: Malware Security

Today’s Networks

• In the past, the network was smaller and slower. Network speeds generally went no higher then 10 Mbit/s. Today that number is 100+ times faster, with networks often starting out at 1 Gbit/s and faster. Additionally, the ease and inexpensive cost of networking gear has enabled many more people to establish their own home networks.

Page 5: Malware Security

Networks, continued

• In the past, with networks being slower or non-existent, it was harder to propagate a virus throughout the world. With today’s networks, though, moving a virus from computer to computer via the network to spread it has made it much easier to propagate the virus.

Page 6: Malware Security

Today's Viruses

• Today, viruses are not being written to bring down computer systems and networks. Today’s viruses are written to accumulate wealth. The concept that a new virus will want to bring down the network is no longer valid. The last thing today’s viruses want to do is disrupt the network because then the virus will have a much more difficult time spreading to other computers.

Page 7: Malware Security

Attacking our Identity

• Today, the virus is written so that the thing we are most concerned about – our identity – is compromised and our financial world is turned upside down.

Page 8: Malware Security

Protecting your Identity

• Here are some tips you can use to protect your identity online:– Keep your computer’s anti-virus software current

and up to date.– When buying online, strive to use a company that

you have heard of, or research a company you are unfamiliar with.

– When you get ready to purchase, make sure that the connection is a secure connection.

Page 9: Malware Security

Protecting your Identity, cont.

• More tips to protecting your identity online:– On your home computers, make sure that your

computer’s operating system patches are current. Our work computers are patched with our patch management software, so you don’t need to check these.

– When you receive email, always check to make sure the link you are about to click on doesn’t take you to a site where it downloads an executable file without you knowing (more about this in the next slide).

Page 10: Malware Security

Links in E-Mail

Page 11: Malware Security

Email Links

Page 12: Malware Security

Common Sense Security• Before you act on something you receive in

email, ask yourself these questions:– Do I know who this sender is?– Was I expecting them to send me this file?– Is the file a ZIP file or an executable file?– Is the email promising me something for nothing?– Does this link look unusual? Or, if all it says is click

“here”, where does clicking “here” take me?– Is my bank telling me about some security risk via

email? If so, it is likely to be a phishing scam, not a true communication from your bank.

Page 13: Malware Security

Summary

• The majority of viruses today are written for profit – to make money off of someone’s identity.

• Look for indications that a site you are going to is secure.

• Make certain that your home computer is kept up to date with its virus signature files and operating system patches.

Page 14: Malware Security

Summary

• When receiving email, make sure that you are getting just email you want to receive, and not things that can harm your system (or finances).

• Remember to look before you click on a link – check to make sure the link you are clicking on really takes you where it is supposed to go.

• Remember, financial organizations (and the IRS, for that matter) do not send information to you via email. Email is not a secure method of communication!

Page 15: Malware Security

Summary

• I hope that these tips will help you to keep your identity safe from theft. Although you can have your identity stolen while performing online transactions, it is important to remember that the majority of Identity Theft cases do not involve online transactions.

• Any questions?


SPLUNK SECURITY USE CASE DETECTING UNKNOWN MALWARE

SPLUNK SECURITY USE CASE DETECTING UNKNOWN MALWARE

Documents
Building malware classificators usable by State security ... · Building malware classificators usable by State security agencies Construcción de clasificadores de malware para agencias

Building malware classificators usable by State security ... · Building malware classificators usable by State security agencies Construcción de clasificadores de malware para agencias

Documents
How Intel Security Defends Against Malware - Infographic

How Intel Security Defends Against Malware - Infographic

Technology
Cyber Security Warning! #1 Threat Keylogging Malware

Cyber Security Warning! #1 Threat Keylogging Malware

Software
SMART HOME APPLIANCE and SECURITY AND MALWARE · smart home appliance security and malware oh 296 virus bulletin conference september 2014 smart home appliance security and malware

SMART HOME APPLIANCE and SECURITY AND MALWARE · smart home appliance security and malware oh 296 virus bulletin conference september 2014 smart home appliance security and malware

Documents
SPLUNK SECURITY USE CASE DETECTING UNKNOWN … · WHITE PAPER SPLUNK SECURITY USE CASE DETECTING UNKNOWN MALWARE AND RANSOMWARE Detecting unknown malware and ransomware…

SPLUNK SECURITY USE CASE DETECTING UNKNOWN … · WHITE PAPER SPLUNK SECURITY USE CASE DETECTING UNKNOWN MALWARE AND RANSOMWARE Detecting unknown malware and ransomware…

Documents
CSCE 790 Computer Systems Security Malware

CSCE 790 Computer Systems Security Malware

Documents
I.G.N. Mantra - Mobile Security, Mobile Malware,and Countermeasure

I.G.N. Mantra - Mobile Security, Mobile Malware,and Countermeasure

Technology
Advanced Systems Security: Malware Detectiontrj1/cse544-s18/slides/cse544-malware.pdfSystems and Internet Infrastructure Security (SIIS) Laboratory Page Malware • Attack code supplied

Advanced Systems Security: Malware Detectiontrj1/cse544-s18/slides/cse544-malware.pdfSystems and Internet Infrastructure Security (SIIS) Laboratory Page Malware • Attack code supplied

Documents
White Paper: Mobile Malware and Enterprise Security

White Paper: Mobile Malware and Enterprise Security

Mobile
Improving Information Security via Mock Malware Incidents

Improving Information Security via Mock Malware Incidents

Technology
Malware Most Wanted: Security Ecosystem

Malware Most Wanted: Security Ecosystem

Technology
How Intel Security Defends Against Malware

How Intel Security Defends Against Malware

Technology
T-110 4206 Malware and Database Security (8)

T-110 4206 Malware and Database Security (8)

Documents
CS5261 Information Security CS 526 Topic 15 Malware Defense Topic 15: Malware Defense

CS5261 Information Security CS 526 Topic 15 Malware Defense Topic 15: Malware Defense

Documents
Critical Infrastructures Security: Improving Defense Against Novel Malware … · 2020. 3. 19. · Critical Infrastructures Security: Improving Defense Against Novel Malware and Advanced

Critical Infrastructures Security: Improving Defense Against Novel Malware … · 2020. 3. 19. · Critical Infrastructures Security: Improving Defense Against Novel Malware and Advanced

Documents
Understanding Malware Security Camp 2015 10-D - JPCERT

Understanding Malware Security Camp 2015 10-D - JPCERT

Documents
The “Business” of Malware IT Security PresentationThe “Business” of Malware IT Security Presentation Secure South West – Plymouth University Thursday 20th September 2012

The “Business” of Malware IT Security PresentationThe “Business” of Malware IT Security Presentation Secure South West – Plymouth University Thursday 20th September 2012

Documents
Malwarebytes Anti-Malware vs. Competitors Malwarebytes Anti-Malware ... Symantec Corp Symantec Endpoint ... Malwarebytes Anti-Malware vs. Seven Endpoint Security Products PassMark

Malwarebytes Anti-Malware vs. Competitors Malwarebytes Anti-Malware ... Symantec Corp Symantec Endpoint ... Malwarebytes Anti-Malware vs. Seven Endpoint Security Products PassMark

Documents
Kindsight Security Labs-Q212 Malware Report-Final

Kindsight Security Labs-Q212 Malware Report-Final

Documents
Splunk Security: Detecting Unknown Malware and Ransomwarenetworkdatahub.com/assets/wp/Splunk-Security-Detecting-Unknown-… · falling victim to malware attacks. This paper will take

Splunk Security: Detecting Unknown Malware and Ransomwarenetworkdatahub.com/assets/wp/Splunk-Security-Detecting-Unknown-… · falling victim to malware attacks. This paper will take

Documents
Economics of malware: Security decisions, incentives and externalities

Economics of malware: Security decisions, incentives and externalities

Documents
PACE-IT, Security+3.1: Types of Malware

PACE-IT, Security+3.1: Types of Malware

Education
The beginning of the end(point): where we are now and ... · with malware link Web Server hosting malware Malware binary C2 Console Check-in Data Stolen Email Security Security Awareness

The beginning of the end(point): where we are now and ... · with malware link Web Server hosting malware Malware binary C2 Console Check-in Data Stolen Email Security Security Awareness

Documents
Mobile malware and enterprise security v 1.2_0

Mobile malware and enterprise security v 1.2_0

Business
Memory Forensics & Security Analytics: Detecting Unknown ... · Memory Forensics & Security Analytics: Detecting Unknown Malware ... Any malware that is not detected by traditional

Memory Forensics & Security Analytics: Detecting Unknown ... · Memory Forensics & Security Analytics: Detecting Unknown Malware ... Any malware that is not detected by traditional

Documents
22- Network Security Threats – Malware

22- Network Security Threats – Malware

Documents
Malware Analysis Identifying Inherent Security Threats

Malware Analysis Identifying Inherent Security Threats

Documents
Mobile security, forensics & malware analysis with …2013.appsecusa.org/2013/wp-content/uploads/2013/12/viaForensics... · Mobile security, forensics & malware analysis with Santoku

Mobile security, forensics & malware analysis with …2013.appsecusa.org/2013/wp-content/uploads/2013/12/viaForensics... · Mobile security, forensics & malware analysis with Santoku

Documents
Tools and techniques for cleaning malware incidents · Tools and techniques for cleaning malware incidents Martin Overton – IBM Security Services Malware/Anti-Malware SME, Forensics,

Tools and techniques for cleaning malware incidents · Tools and techniques for cleaning malware incidents Martin Overton – IBM Security Services Malware/Anti-Malware SME, Forensics,

Documents