|
A Glimpse into the Future of Intrusion Detection
|
|
Hits: 1 |
|
Date added: 04/04/2006 |
|
Tim Bass, Dave Gruber, Usenix Featured Article, Nov 1999 |
|
|
|
|
|
A Framework for Distributed IDS using Interest-Dri
|
|
Hits: 1 |
|
Date added: 04/16/2006 |
|
A Framework for Distributed IDS using Interest-Driven Cooperating Agents
Rajeev Gopalakrishna, Eugene H. Spafford, RAID Symposium, 2001 |
|
|
|
|
|
|
A Denial-of-Service Resistant Intrusion Detection
|
|
Hits: 2 |
|
Date added: 01/20/2006 |
|
Peter Mell, Donald Marks, Mark McLarnon, 2000 |
|
|
|
|
|
|
A day in the life of the JPEG Vulnerability
|
|
Hits: 0 |
|
Date added: 08/05/2005 |
|
This paper will provide a detailed analysis of the Buffer Overrun in JPEG Processing which started appearing on Microsoft software in September 2004.
Just a week prior to writing this paper, Microsoft announced a buffer overrun in JPEG processing in many of Microsoft’s software. This particular vulnerability increased the difficulty of patching for large organizations since it not only impacted operating systems, it also included many popular software packages such as Microsoft Office and development software such as Visual Studio .Net.
This paper will include an analysis of the timeline between the vendor announcement of this vulnerability, to actual exploit code or proof of concept, to an actual attack. An analysis of an attack as well as steps one could use to mitigate the risk of this vulnerability will also be completed. Finally, policies and processes that all organizations is included for reference.
I chose this particular vulnerability because of several reasons. The first was to understand the timeline users face when determining how long they have before they should patch. Often times, large organizations need to test patches against several different desktop builds, and that could take a couple days each. A second reason was to develop an understanding of this new type of attack. This particular attack focuses on user interaction, or even social engineering. Finally, there was little information available at the time this paper was being written. Therefore, it is my contribution to the community as an analysis of the new threat. |
|
|
|
|
|
|
