|
Mutating software could predict hacker attacks |
|
|
|
Source: NewScientist - Posted by David Isecke
|
Novel computer viruses and worms can sweep the world within hours, leaving a trail of devastation, because firewalls and antiviral software work by identifying the telltale signatures of known attacks. They are useless against anything completely new. But now software engineers at Icosystem in Cambridge, Massachusetts, have developed a program that can predict what is coming next by "evolving" future hacker and virus attacks based on information from known ones. The company is testing the technique with the help of the US Army's Computer Crimes Investigation Command in Fort Belvoir, Virginia. . . .
Novel computer viruses and worms can sweep the world within hours, leaving a trail of devastation, because firewalls and antiviral software work by identifying the telltale signatures of known attacks. They are useless against anything completely new.But now software engineers at Icosystem in Cambridge, Massachusetts, have developed a program that can predict what is coming next by "evolving" future hacker and virus attacks based on information from known ones. The company is testing the technique with the help of the US Army's Computer Crimes Investigation Command in Fort Belvoir, Virginia. The idea would be to generate these novel attack strategies centrally, then remotely update the intrusion-detection software protecting PCs and networks around the world. This would allow them to recognise attack patterns before hackers have even developed them. The first version of the system is geared to predict hacking - though the technique is equally applicable to viruses. It works by mutating the short programs or "scripts" that hackers use to invade computers or which they plant on them for later activation. The result is artificially created hacking routines that security systems could be taught to recognise, allowing them to defend networks against previously unseen attacks.
Read this full article at NewScientist
Only registered users can write comments. Please login or register. Powered by AkoComment! |