【導(dǎo)讀】everymove!Spyware–Examples,Mechanics,Effects,Solutions. TrackingCookies–Mechanics,Effects,Solutions. TrojanHorses–Mechanics,Effects,MoreExamples. TargetedPop-ups. SlowConnection. TargetedE-Mail(Spam). UnauthorizedAccess. SpamRelaying. SystemCrash. Age:RelativelyNew(<5Years)Age:RelativelyOld(>20Years)

　　

【正文】 Security Implications ? Divulge personal data ? Backdoors into system ? System corruption ? Disruption / Irritation ? Aids identity theft ? Easy virus distribution ? Increased spam Spyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai ? Mass data collection ? Consequences unknown ? Web bees unusable ? Web cons outweigh pros ? Cost of preventions ? More development work ? More IP addresses (IPv6) Short Term Long Term Solutions Spyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai ? Firewall ? Virus Checker ? Spyware Remover ? Frequent OS updates ? Frequent backup ? Learning problems ? Add Spyware to AntiVirus ? Automatic maintenance ? Legislation ? Education on problems ? Biometric access ? Semantic web (and search) Short Term Long Term Firewalls ? 3 Types… – Packet Filtering – Examines attributes of packet. – Application Layer – Hides the work by impersonating the server (proxy). – Stateful Inspection – Examines both the state and context of the packets. ? Regardless of type。 must be configured to work properly. ? Access rules must be defined and entered into firewall. Spyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai Network / Inter Web Server Firewall tcp 80 tel tcp 23 ftp tcp 21 tcp 80 Allow only tcp 80 Firewalls InterSpyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai Network / Inter PC Firewall : 80 : 1020 Only allow reply packets for requests made out Block other unregistered traffic : 80 : 1020 InterPacket Filtering Stateful Inspection Image Source – Image produced by Andrew Brown, Tim Cocks and Kumutha Swampillai。 partially inspired by a diagram from [4]. Intrusion Detection Systems Spyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai Network PC Server Server IDS Firewall Switch ? Intrusion Detection – A Commercial Network Solution ? An “Intelligent Firewall” – monitors accesses for suspicious activity ? Neural Networks trained by Backpropagation on Usage Data ? Could detect Trojan Horse attack, but not designed for Spyware ? Put the IDS in front of the firewall to get maximum detection ? In a switched work, put IDS on a mirrored port to get all traffic. ? Ensure all work traffic passes through the IDS host. In te rn e tImage Source – Image produced by Andrew Brown, Tim Cocks and Kumutha Swampillai。 partially inspired by a diagram from [4]. “System X” ? Composed of… – Open Source OS – Mozilla / Opera / Lynx (!) Browser (Not IE) – Stateful Inspection Firewall – AntiVirus Software – Careful and educated user – Secure permissions system – Regularly updated (possibly automatically) Spyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai Network / Inter / Standalone Questions… Spyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai Image Source – Penny Arcade Bibliography / Links ? [1] Spyware Definition BlackICE Inter Security Systems ? [2] Trojan Horse Definition – Texas State Library and Archives Commission ? [3] ZeinalipourYazti, D. “Exploiting the Security Weaknesses of the Gnutella Protocol”, University of California. ? [4] Joshi, R. “Network Security Applications”, Merchantile Communications, CANIT Conference 2020. ? [5] CERT Advisory CA199902 ? [6] Spyware Guide – ? [7] Trojan Horses ? [8] Trojan Horse Back Orifice ? [9] NetBus ? [10] BBC News ? [11] Wired News – “Judge takes bite out of Gator” ,1283,53875, ? [12] Tracking Cookies – Demonstration at ? [13] BonziBuddy ? [14] Unwanted Links (Spyware) – ? [15] Andersen, R. Security Engineering, First Edition, J. Wiley and Sons, 2020. ? [16] Scacchi, W. “Privacy and Other Social Issues”, AddisonWesley, 2020. – Spyware and Trojan Horses – Computer Security Seminar 12th February 2020 Andrew Brown, Tim Cocks and Kumutha Swampillai