« NE who? | Main | It’s (still) coming – the mobile web »

June 4, 2007

Attack of the bots

Bots Sometimes the disconnect between what we report and the view from the ground is disconcertingly great, for whatever reason, so here's another quick dig in the ribs for IT managers. Anti-malware specialist Sana Security – yeah I know there's a vested interest somewhere, but they also have pretty good visibility into what's going on – renewed warnings detailing the why today's bots are growing at such a rapid rate, perpetuating spam, and launching malware and denial of service attacks.

The firm's Tim Eades explained how rootkit capabilities have become more advanced, making the little critters harder to detect, and how most bots now don't need the traditional 'bot herder' to control them. Because they often operate on a kind of P2P model nowadays, he added, they can be maintained by each other, making traditional methods of tracking down the system admin and shutting it down pretty pointless. While appliances can do 80 percent of the job of protecting the enterprise, therefore, firms would do well to look at a signature based security agent on the client side, with some kind of sandboxing or behavioural heuristics technology in place. Eades also encouraged firms to work with their ISPs more, as they are in the best position to spot, track and mitigate attacks stealing bandwidth, processing speed and sensitive information from organisations.

Comments

Post a comment

Site credentials: About | Privacy policy | Terms & conditions | Top of the page
© Incisive Media Ltd. 2009
Incisive Media Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, is a company registered in the United Kingdom with company registration number 04038503