ethical worm

The deployment of ethical worms for patch distribution is frequently suggested in discussion forums, especially in the wake of a wide-ranging malicious attack. In January 2003, a worm called the SQL Slammer exploited a known buffer overflow vulnerability in Microsoft SQL 2000 server systems to cause widespread Internet outages. The attack, which may have been carried out to illustrate the problem of lax security, was launched precisely six months after Microsoft released a patch for the flaw. Had the patch been installed to vulnerable systems, the SQL Slammer attack might have had little impact.

Although installing security solutions through ethical worms would, at least, ensure they were deployed, there are concerns that the method would create more problems than it solved. According to Ed Skoudis, author of the book, "Counter Hack: A Step-by-Step Guide to Computer Attacks and Effective Defenses," even if an ethical worm worked flawlessly, it could inadvertently cause damage because of conflicts with other programs and particular system configurations.

Learn more about Security Testing and Ethical Hacking

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

More resources from around the web: - SearchSecurity.com offers a tip from Ed Skoudis, "Ethic worms: a bad idea." - SearchNetworking.com offers a page listing white papers about "Network Security." - Ed Skoudis's book is available at Amazon.com.

FILE EXTENSION AND FILE FORMAT LIST File Extension and File Format List: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z #

RELATED CONTENT H.D. Moore speaks about Metasploit Project deal, Release 3.3 Founder talks about the community's reaction to the Rapid7 acquisition, big changes in the latest Metasploit Framework release and what the future... Could Metasploit popularity erode? The Metasploit Project, created by researcher H.D. Moore and kept open source since 2003, has been acquired by Rapid7 which has plans to integrate... Metasploit Project acquired by vulnerability management firm Rapid7 The popular Metasploit Framework remains a free and open source hacking tool. Creator HD Moore joins Rapid7 as CSO, Metasploit architect.

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary Cyber Storm  (SearchSecurity.com) Cyber Storm is the name of a simulated attack exercise conducted by the U.S. Department of Homeland Security (DHS) February 6-10, 2006 to evaluate... ethical hacker  (SearchSecurity.com)