Malicious Malware: attacking the attackers, part 1

Malicious Malware: attacking the attackers, part 1
Thorsten Holz, Frederic Raynal

This article explores measures to attack those malicious attackers who seek to harm our legitimate systems. The proactive use of exploits and bot networks that fight other bot networks, along with social engineering and attacker techniques are all discussed in an ethical manner. Part one of two.

Expand all | Post comment

AT LEAST! 2006-02-01
Alexey Vesnin

Malicious Malware: attacking the attackers, part 1 2006-02-01
Anonymous

Malicious Malware: attacking the attackers, part 1 2008-10-15
Angelo Cire

The only MAJOR issue I had with this article was your statement very early on that many hackers are very curious. That is true, but only, for the most part, of script kids and non-objective-driven hackers. Real hackers that want to GET something from your system don't go randomly executing binary for yucks.

Now, I realize that from many admins' perspectives, an attack is an attack, but frankly, spend your time worrying about the attackers who WANT to hurt your system, at least when you're talking about retaliation or proactive defense.

Really, this all seems like the same old information security approach - try to build things to anticipate the attack; that's really what you're doing when you secure your system.

Security admin that I've met are generally pretty lazy, and the last thing they'd like to do is implement a CMMI-type system that MANDATES constant reasessment of their systems and testing.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1856/1204#1204