90 likes | 201 Vues
Technologies of Tomorrow, Today. John Viega john@stonewallsoftware.com T witter: viega. Why HIPS Sucks. xxx.exe. Unpacks. yyy.exe. Web Reputation. Browser exploits. Adware/ Spyware/ Trojan /Virus. High Volume Commercial Email. Affiliations with other risky sites.
E N D
Technologies of Tomorrow, Today John Viega john@stonewallsoftware.com Twitter: viega
Why HIPS Sucks xxx.exe Unpacks yyy.exe
Web Reputation Browser exploits Adware/ Spyware/ Trojan /Virus High Volume Commercial Email Affiliations with other risky sites Aggressive Pop-up Marketing Community reviews/ comments
Real Time / Cloud analysis omgwtfetc.exe Possible analysis, or random guessing OMG, WTF? AV Vendor ETC…
Problems Still Remain • Seeing enough samples • Operational scale • The testing problem • Disabling the product
Herd Technology xxx.exe YYY.exe Unpacks xxx.exe ZZZ.exe Unpacks kthx! Please Monitor! xxx.exe xxx.exe is bad! Stonewall xxx.exe is bad!
Virtualization Security SW