|
Know Your Enemy: Behind the Scenes of Malicious Web Servers |
|
|
|
Source: net-security - Posted by Bill Keys
|
In our recent KYE paper on malicious web servers, we identified several hundred malicious web servers. These servers launched, so-called drive by downloads, that allowed them to gain complete control of the client machine without the consent or notice of the user, who merely visited the malicious web server with his (vulnerable) web browser. In our study, we analyzed a large number of web servers with our client honeypot Capture-HPC, which allowed us to assess whether a server was malicious, then inspect the exploit code that was sent to the client and the potential malware downloaded. However, many questions remained unanswered:
It's a good idea to keep up with the latest security research. This article talks about what researchers learned by implementing a web server honeypot. Do you think honeypots are a good way for learning about the latest security threats?
It's a good security practice to keep an eye on
Read this full article at net-security
Powered by AkoComment! |
