Home > Victoria U Honeypot Tech Leads to Net Attack Study

News

Victoria U Honeypot Tech Leads to Net Attack Study

9/13/2007

The international Honeynet Project, a research consortium formed to share computer threat information and solutions, is using a behavioral analysis tool developed at New Zealand's Victoria University to study Web-based security attacks.

According to the Honeynet Project study, which used the Vicoria University's Capture HPC analysis tool, many Web addresses that appear to be safe are rife with attack code aiming at vulnerable clients. Moreover, attackers are increasingly turning to end-user systems as a way around antivirus and firewall systems that are blocking their access to traditional attack routes.

"The 'black hats' are turning to easier, unprotected attack paths to place their malware onto the end-user's machine," according to the study by the Honeynet researchers, titled, "Know Your Enemy: Malicious Web Servers."

The study used Capture HPC to analyze more than 300,000 addresses from around 150,000 hosts. It looked at various types of sites, including music and news sites, and concluded that while some categories were more likely to contain malicious addresses than others, all contained malicious addresses.

"As in real life, some 'neighbourhoods' are more risky than others, but even users that stay clear of these areas can be victimized," the report said. "Any user accessing the Web is at risk."

Victoria University researchers Ramon Steenson and Christian Seifert said Capture HPC analyzes the state of an operating system and applications running on it and generates reports for any events received. In stand-alone mode it also function as a behavioral analysis tool for software running on Win32 operating systems including the latest version of Windows Vista.

Read More:


Paul McCloskey is a contributing editor for the Campus Technology group of publications.

Cite this Site

Paul McCloskey, "Victoria U Honeypot Tech Leads to Net Attack Study ," Campus Technology, 9/13/2007, http://www.campustechnology.com/article.aspx?aid=50239

copy text (above) for proper citation



Recommended Reading
  • Sun, Stanford Working To Archive History

    In May in San Francisco, experts from leading universities, libraries, and research institutions around the world met as part of an ongoing effort to address a pressing issue: archiving the world's history, right up to today.

  • The Quilt Coalition Rolls Out XO Communications for High-Capacity Network Services

    The Quilt, a coalition of 28 regional network organizations, has added XO Communications Services to its authorized vendor list. The Quilt represents 200 universities and thousands of other educational institutions across the United States. With this new relationship, Quilt members can purchase XO's high-speed IP transit and network transport services at competitive rates.

  • Wimba Classroom 5.2 Expands Classroom Capture Support, Adds MP3 Downloads

    At the NECC 2008 conference in Texas this week, Wimba launched a new version of Wimba Classroom, the virtual classroom component of the company's Collaboration Suite. The new 5.2 release expands options for classroom capture and adds a variety of other functional and ease of use features.

  • Automation Chimera: Education Is Not Management

    The lure of automating workflow online so human intervention is minimized is continually reinforced in the minds of higher education administrators by examples of automated campus systems such as financials, student information systems, and other enterprise systems. But what's good for management is not always good for learning.

  • Cognos Releases BI Software for Linux-based IBM System z Mainframe

    Cognos, which IBM acquired in January, has released an update to its business intelligence software that will run on the Linux operating system on IBM System z mainframes. IBM Cognos 8 BI was being developed by the two companies prior to the acquisition, but assimilation of Cognos into IBM accelerated development.

  • Facebook and Collegiality: A Serendipitous Social Niche

    Facebook is a way to greet a colleague as if she or he is on your own campus: a wave at a distance, a hello at the corner burrito place, a honk as you both leave the campus parking lot. Informal collegiality has been extended over the miles.