Premium Content

Access "The 'antiworm' evolution: Can it help Internet worm protection?"

Published: 20 Dec 2012

In the security world, we throw buzzwords around like candy at a Halloween party. Anytime a catch phrase gets traction, it seems that every vendor makes a pitch that its product is "unique" or "first" in the new category. It would be easy to simply write off these categories -- except that sometimes vendors actually have a new solution. Enter "antiworm" or "worm containment" solutions. They promise new prevention and detection techniques that reduce or eliminate propagating worms and protect networks by weeding out bad traffic. The first set of solutions is based on anomaly detection, which identifies malicious code based on deviations from known, acceptable traffic patterns. Solutions from Mazu Networks, Arbor Networks, Lancope and Q1 Labs can quickly identify anomalous activity because most worms will spew out traffic and attempt to connect to other hosts. These solutions don't rely upon static signatures or rules, but will kick off an alarm when they see a traffic spike. Next are those solutions that automatically isolate compromised hosts to contain the ... Access >>>

Access TechTarget
Premium Content for Free.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

What's Inside

Features

More Premium Content Accessible For Free