symantec,security,corporate network,perimeter,shift inside boundary,hackers,attackers,cyber-attacker
Vincent Weafer, senior director of Symantec Security Response, said cyber-attackers are shifting their efforts from outside the intranet boundary to inside.
The attackers are taking an increasing interest in intranet-facing private network services in common desktop personal computers.
According to Weafer, the farms of desktops inside the network perimeter provide a rich picking ground for attackers. They are often less secure than systems that face the Internet directly, making them attractive recruits for orchestrated actions such as denial-of-service attacks, said Weafer.
And email-borne worms and Trojans aren't the primary drivers behind the new trend. It is directly related to the growing family of Distributed Component Object Model (DCOM) vulnerabilities discovered in Microsoft's Remote Procedure Call (RPC) implementation, according to Symantec. The new varieties of attacks burrow directly through the network perimeter.
"It's not getting more difficult for the attackers," said Weafer.
Symantec estimates that new vulnerabilities -- primarily in the Windows platform -- are now being uncovered at a rate of around 70 per week and he gave clear indications that software companies are still unable to keep up.
Illustrating his concerns, Weafer claims that a Windows 2000 operating system with all current Microsoft security patches applied will still be vulnerable to malicious infiltrators.
Late last week, the company's Deep Sight global sensors recently registered an increase in attacks on TCP port 445, which is associated with Windows network file and print services, prompting the company to upgrade its threat warnings.
Symantec estimates the cyber-attack activity in the first six months of 2003 was 19 percent higher than during the corresponding period for 2002.
In order to post a comment you need to be registered and logged in
Log in or create your ZDNet UK account below
By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Membership FAQ
Fedora is the same way as well. The yum update system uses "presto" which shrinks the amount of data needed for download. It's a great system....
6 hours ago by apexwm on Can you believe it - 2765 kB will be freed?
Updated ID cards considered for 2012: [zdnet.co.uk] The government is considering introducing a new generation of ID... http://dlvr.it/KpBZ
7 hours ago on Twitter by cybfor Google, Viacom trade blows in YouTube copyright spat: [zdnet.co.uk] Google and the US media giant Viacom have issued... http://dlvr.it/Knht
8 hours ago on Twitter by cybfor
Be sure to include an audio option - eg. a beep tone - to intensify and reiterate the action. This will greatly benefit some consumers and give...
8 hours ago by CIMITL Data disposal is really important to get right. There are standards set by UK and US federal governments to ensure that data is kept secure. If...
9 hours ago by DataSecurityUK Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...
10 hours ago by chaycon1 on BT launches 40Mbps fibre-based broadband Online Fiber Optic Certification Join a talented group of professionals, who are dedicated to Fiber Optic Networking technology. The online course...
10 hours ago by chaycon1 on Google to build gigabit broadband to the home
Hi Dava, I'm glad to hear from you, and glad that you see things from the other side. I think that is the most important point of the whole...
11 hours ago by J.A. Watson on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest
please please please please please please kill that spam bot.
11 hours ago by dava4444 on ZDNet UK: faster, smarter, still IT all the way it didn't post the link it's 'Ubuntu 10.04 Lucid Lynx Beta-1 First Look' on youtube :) Dava
14 hours ago by dava4444 on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest Hi James I disagree, Ubuntu needs a GUI update and this one IMO is quite good. your pics show a low res. here's a high res. on YouTube* The...
14 hours ago by dava4444 on Ubuntu 10.04 (Lucid Lynx) and the Latest Tempest Hi any news on the comment bot? knocking me back from my own blog is a bit cheeky lol *Mulder to Scully* "I think it has an agenda.." I know, I...
15 hours ago by dava4444 on ZDNet UK: faster, smarter, still IT all the way if you look at the Brentwood exchange on samknows it servers 21,000 residential propertiesm, Lowestoft serves 31,000! Come on BT sort yourselves...
16 hours ago by benny boy on BT fibre broadband coming to 69 more towns
[programming] H.264 - a sting in the tail http://reddit.com/bfu4q [zdnet.co.uk]
17 hours ago on Twitter by pbreddit
H.264 - a sting in the tail [programming] 13 points, submitted by zigzag [zdnet.co.uk] http://reddit.com/bfu4q
18 hours ago on Twitter by reddit Malware infects second Vodafone HTC phone: [zdnet.co.uk] A second Android-based HTC Magic from Vodafone has been... http://dlvr.it/KhKx
20 hours ago on Twitter by cybfor
Chatter preview http://www.zdnet.co.uk/news/application-development/2010/03/17/salesforce-opens-up-chatter-developer-preview-40088348/
20 hours ago on Twitter by miyabi81 US gov t considers undercover social networking: [zdnet.co.uk] The Obama administration has considered sending... http://dlvr.it/Kh3L
20 hours ago on Twitter by cybforFor multi-store outlets, including retail, banking, grocery, gas, hospitality, convenience stores and others, reducing (or avoiding) the cost of in-store system support and maintenance while maintaining compliance with PCI and other requirements has become a strategic challenge.
Speaker: Dr. Chenxi Wang, Principal Analyst, Security and Risk Management, Forrester Research, Inc. As Enterprises are increasingly connected to the Internet and as hard organizational boundaries are fast disappearing, security professionals are facing fresh challenges in Enterprise computing.
This tutorial is for new MindManager users and teaches you how to get started, by creating maps, reading maps and organizing your information.
