Channel Marker

Jun 7 2007   4:07PM GMT

A new way to hide malicious code

Bcournoyer Brendan Cournoyer Profile: Bcournoyer

Viruses, trojans and worms are going into stealth mode.

A recent study by security vendor Finjan has found a new type of attack that researchers say is harder to detect and stop from spreading. They’re called “evasive attacks,” and here’s how they work: They keep track of the IP addresses of visitors to an infected Web page, and only expose users to the malicious code once. When the user returns to the page, all traces of malicious code are gone. And that reduces the chances of detecting the attack quickly.

Finjan says traditional antivirus products and other security technologies will become less effective as these evasive attacks become more prevalent, and the company recommends new technologies to keep the threats from getting to that point. The study, of course, highlights Finjan’s technology that scans code in real time and prevents the attacks from launching in the first place.

 Comment on this Post

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

Share this item with your network: