Defense and detection strategies against internet worms

Jose Nazario

318 pages, parution le 07/01/2004

Ajouter à une liste

Indisponible

Résumé

This is the first book focused exclusively on Internet worms, offering you solid worm detection and mitigation strategies for your work in the field. This ground-breaking volume enables you to put rising worm trends into perspective with practical information in detection and defense techniques utilizing data from live networks, real IP addresses, and commercial tools. The book helps you understand the classifications and groupings of worms, and offers a deeper understanding of how they threaten network and system security.

After examining how a worm is constructed and how its major life cycle steps are implemented, the book scrutinizes targets that worms have attacked over the years, and the likely targets of the immediate future. Moreover, this unique reference explains how to detect worms using a variety of mechanisms, and evaluates the strengths and weaknesses of three approaches - traffic analysis, honeypots and dark network monitors, and signature analysis. The book concludes with a discussion of four effective defenses against network worms, including host-based defenses, network firewalls and filters, application layer proxies, and a direct attack on the worm network itself.

L'auteur - Jose Nazario

Jose Nazario is a senior software engineer at Arbor Networks, an internet security company. He is also a consultant and researcher at Crimelabs Research, a think tank and consulting firm. He holds a Ph.D. in biochemistry from Case Western Reserve University. He has published extensively.

Sommaire

Introduction. Background and Taxonomy

Worms defined
Worm Traffic Patterns
Worm History and taxonomy
Construction of a Worm

Worm Trends

Infection Patterns
Targets of attack
Possible futures for worms

Detection

Traffic Analysis
Honeypots and dark (blackhole) network monitors
Signature based Detection

Defenses

Host-Based Defenses
Firewall and network defenses
Proxy-based defenses
Attacking the Worm Network

Conclusions

Voir tout

Replier

Caractéristiques techniques

	PAPIER
Éditeur(s)	Artech House
Auteur(s)	Jose Nazario
Parution	07/01/2004
Nb. de pages	318
Format	18 x 23,5
Couverture	Relié
Poids	640g
Intérieur	Noir et Blanc
EAN13	9781580535373
ISBN13	978-1-58053-537-3