Channel Marker

Jun 7 2007   4:07PM GMT

A new way to hide malicious code



Posted by: Bcournoyer
Tags:
Network and application security

Viruses, trojans and worms are going into stealth mode.

A recent study by security vendor Finjan has found a new type of attack that researchers say is harder to detect and stop from spreading. They’re called “evasive attacks,” and here’s how they work: They keep track of the IP addresses of visitors to an infected Web page, and only expose users to the malicious code once. When the user returns to the page, all traces of malicious code are gone. And that reduces the chances of detecting the attack quickly.

Finjan says traditional antivirus products and other security technologies will become less effective as these evasive attacks become more prevalent, and the company recommends new technologies to keep the threats from getting to that point. The study, of course, highlights Finjan’s technology that scans code in real time and prevents the attacks from launching in the first place.

 Comment on this Post

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to: