Thursday, December 08, 2005

Port Scans May Not Always Signal Attacks

University of Maryland'’s A. James Clark School of Engineering researchers have released quantitative data on how hackers break into computers. Their work could change the way system administrators secure their computer systems.

Many (don't count me) in the computer security community have assumed for years that "port scans" precede actual attempts to hack into computers (in a port scan, the hacker tries to find the availability and potential weaknesses of the computer). While some of the largest corporations and government agencies have focused on similar issues, they have not released their findings.

The Clark School researchers, in an article published earlier this year at the Institute of Electronics and Electrical Engineers (IEEE) International Conference on Dependable Systems and Networks DISNEYN Â’05), revealed that port scans precede attacks only around 5 percent of the time. More than 50 percent of attacks are not preceded by a scan of any kind. Hackers donÂ’t necessarily look before they leap.

0 comments:

 
Copyright 2018 e2e Security. Powered by Blogger Blogger Templates create by Deluxe Templates. WP by Masterplan