Introductions

Other Pages

• Featured Articles Introduction
• Managing Risk Introduction
• Regional Threat Assessment Introduction

• Download Library (previous SIR editions)
• Videos
• Community
• Acknowledgements
• Glossary

Introduction

Conficker Remains a Threat

• Propagation Mechanisms
• Results
• Clean Up Tips

Determined Adversaries

• Introduction
  • Same Old Tricks, New Era
  • The Role of the Internet
• Targeted Attacks
• Challenges
  • Risk Management
  • Prevention
  • Detection
  • Containment
  • Recovery
• Communication and Information Sharing
  • The Role of Governments
• Conclusion

Case Studies

• TeliaSonera Removes Botnet

Evolution of Malware, 10-year

• Computing & Malware Origins
• TwC History
• Vulnerabilities
• Exploits & Security Bulletins
• Malware Trends
• Threats by Location

Zeroing in on Malware

• Analysis and Results
  • Classifying Malware
  • Analytic Methods
  • Results
• Insights
  • User Interaction
  • Feature Abuse
  • Exploit Age
• Analysis Details
  • Using the Taxonomy
  • Vulnerability Subprocess
  • Methodology Details
  • Other Classifications of Malware
• Conclusion
• IT Pros: Social Engineering Advice

FakePAV: How to Fight Back

What Is a Botnet?

• History
• Botnets Today
  • IRC Botnets
  • HTTP Botnets
  • Other Protocols
  • P2P Command and Control
• How Botnets are Used
  • Spamming
  • Phishing
  • Denial-of-Service Attacks
  • Installing Malware
  • Click Fraud
  • Stealing Confidential Data
  • Distributing Malware
  • Honeypots & Darkents
• How do Botnets work
  • Botnet Creation
  • Controlling the Botnet
  • Spreading Bots
  • Defending the Botnet
• Detecting Botnets
• Botnet Commerce

Botnet Special Edition Reports

• Rustock
  • How Rustock Works
  • Spam
  • Deployment
  • Defeating Rustock
  • Rustock Statistics
  • Infection Statistics
  • Spam Statistics
  • Defense Guidance
• Waledac
  • Technical Action Plan
  • Tackling P2P
  • The Legal Action Plan
  • Defense Guidance
• Zbot
  • How Win32/Zbot Works
  • Fighting Win32/Zbot
  • Geographic Statistics
  • Defense Guidance
• Qakbot
  • What is Qakbot?
  • Code & Telemetry Clues
  • Geographical Statistics
  • Chronology of an Infection
  • Evolution of Qakbot
  • Modern Functionality
  • Defense Guidance

Introduction

Protecting Your Organization

• Protecting Against Malware
• Protecting Enterprise Networks
• Promoting Safe Browsing
  • SmartScreen Filter
  • ActiveX Filtering
  • Other browser defenses
  • Security Compliance Manager
• Guarding Against Email Threats
• Preventing Security Breaches
• Using Update Services

Protecting Your Software

• Securing ActiveX Controls
• Guarding Against SQL Injection
• Exploit Mitigations in Windows

Protecting Your People

IT Pro: Advanced Techniques

• Step 1: Disconnect
• Step 2: Identify Processes
  • Using Process Explorer
  • Tracing Malware
• Step 3: Terminate Processes
• Step 4: Delete Autostarts
• Step 5,6,&7: Conclusion