You are here: silicon.com > Resources > White Papers > Networking and Communications > Network Technologies > TCP - IP

TechNet Webcast: Network Forensics: Identifying Attack Signatures (Level 200)

Overview Listening in on network traffic (network forensics) can reveal whether an application and data communications are secure, and point out possible reconnaissance processes preceding an attack. Learning the signatures of the breach traffic is also the first step in blocking it at bordering devices or at the desktop. The presenter of this webcast begins by displaying numerous trace files indicating network reconnaissance is underway on a network (operating system fingerprinting, IP scans, zombie-based scans, blind UDP scans, application mapping sessions, and directed TCP scans) and identifies the unique signatures in each of these communications.

Further White Paper Details
Publisher	Microsoft
Live Date	31st August 2007 01:00 UTC
Format	Webcast
Topics	TCP - IP, Security Management, Digital Signatures

Did you find this white paper useful? 8 out of 13 users found this white paper useful

Cash In Your PBX -- Upgrade with Cisco. Gain significant new savings now

PBX systems and old telephony applications were just not built for today's business needs. They don't scale easily, struggle to support mobility, and are increasingly expensive to maintain. Now you...

Publisher:
Cisco Systems

IOS Tips and Tricks

There are a number of things you can do with Cisco's IOS to make your life easier. This white paper presents some ways that IOS commands can help streamline your...

Publisher:
Global Knowledge

Tags:
tcp - ip

Dell-Customized Mobility Solutions

The marketplace is overflowing with a multitude of mobility options for businesses of all types and sizes. From notebooks, netbooks, and handheld computers to WiFi, smartphones, and mobile broadband, there...

Publisher:
Dell

Tags:
lan - wan standards

Interactive Guide: Enterprise Mobility

Getting Started With Enterprise Mobility: A Guide to Sybase's Enterprise Mobility Platform. With the broadest portfolio of industry-leading products, an innovative mobility platform that provides a foundation for future growth,...

Publisher:
Sybase

Tags:
wireless lan

Webcast & Video: Special Report on MEAP featuring research from Gartner

Complimentary Webcast: Taking a Strategic Approach to Enterprise Mobility. Whether you're just getting started with mobility or have already rolled out multiple applications, taking a strategic approach to mobility is...

Publisher:
Sybase

Tags:
wireless lan

Signing up the competition - have digital signatures met their match?

CyberCop scans user activity on a network by comparing it to the database of attacks. Here, the signature does not refer to the electronic equivalent of a hand-written signature, but to the typical trace a hacker leaves behind.

Channel:
Comment & Analysis

Slammer time - SQL worm brings net to its knees over weekend

System administrators who are unable to download the patch should block UDP port 1434, said experts. UDP port 1434 is used by the SQL Server Resolution Service, which provides a way for clients to find a particular instance of SQL Server on a machine.

Channel:
Security Strategy

KPMG 'scaremongering' with VoIP warning

Some operating systems leave unused ports open, making them vulnerable to port scans. Warhurst suggests that companies look for VoIP systems that have voice encryption using the 128-bit AES standard, which "provides a level of security that is...

Channel:
VoIP

'Some viruses are welcome', says anti-gypsy lobby

Another customer was also hoping detection signatures were delayed but he went on to wish for a variant that could attack legacy systems: "Couldn't you guys wait two or three more days, until my whole neighbourhood was infected?

Channel:
Malware
Tags:
gypsy,
virus,
bitdefender

The A to Z of security

When installed on a PC, antivirus software monitors and scans inbound, outbound and existing files to check for traces of infection - traditionally by using what is known as a 'signature database', a library of known malicious code used to...

Malicious code getting harder to spot

Referring to security techniques based on signatures to detect malicious websites, he said: "They use obfuscation to avoid simple signatures. Signatures are fingerprints of known attacks. Increasingly the actual code, often JavaScript, used to...

Featured White Papers

The Value of Location Intelligence in the Communications Industry

Public Services are under pressure, the challenge is to do more with less. How do you improve citizen satisfaction, increase cost efficiencies and improve service delivery? The power of location intelligence is helping many local authorities and government departments make more informed decisions and derive greater value from current location-based information and data. Read this whitepaper to see how you can take advantage of location intelligence.

Publisher:
Pitney Bowes

Best Practices for Translating Customer Satisfaction into Revenue

Today's support organisations are focused on two top-level metrics: financial results and customer satisfaction. For most, it's easy to track financial performance, but customer satisfaction is akin to speaking a foreign language. How do you quantify customer satisfaction? Download the Best Practices for Benchmarking Customer Satisfaction to get industry research the Association of Support Professionals (ASP) on how to measure and leverage customer satisfaction.

Publisher:
Citrix Online

HP print solutions and 3M

the objective for 3M was to optimize office printing infrastructure at 3Mlocations worldwide Reduce total cost and environmental footprint. Some of the business benefits acheived by switching to HP print soultions, More than $3 million in savings in first two years and Per page costs reduced by up to 90 percent.