RE: [iwar] [news] A 'Tarpit' That Traps Worms

From: Leo, Ross (Ross.Leo@csoconline.com)
Date: 2001-09-21 07:43:21


Return-Path: <sentto-279987-2159-1001083399-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Fri, 21 Sep 2001 07:44:11 -0700 (PDT)
Received: (qmail 10868 invoked by uid 510); 21 Sep 2001 14:43:40 -0000
Received: from n29.groups.yahoo.com (216.115.96.79) by 204.181.12.215 with SMTP; 21 Sep 2001 14:43:40 -0000
X-eGroups-Return: sentto-279987-2159-1001083399-fc=all.net@returns.onelist.com
Received: from [10.1.4.53] by b05.egroups.com with NNFMP; 21 Sep 2001 14:43:19 -0000
X-Sender: Ross.Leo@csoconline.com
X-Apparently-To: iwar@yahoogroups.com
Received: (EGP: mail-7_3_2_2); 21 Sep 2001 14:43:18 -0000
Received: (qmail 21956 invoked from network); 21 Sep 2001 14:43:17 -0000
Received: from unknown (10.1.10.27) by l7.egroups.com with QMQP; 21 Sep 2001 14:43:17 -0000
Received: from unknown (HELO csoc-fire1.csoconline.com) (140.169.2.142) by mta2 with SMTP; 21 Sep 2001 14:43:17 -0000
Received: from [140.169.2.142] by csoc-fire1.csoconline.com via smtpd (for [208.48.218.7]) with SMTP; 21 Sep 2001 14:43:17 UT
Received: by csoc-mail-imc.csoconline.com with Internet Mail Service (5.5.2653.19) id <S5572GZZ>; Fri, 21 Sep 2001 09:42:28 -0500
Message-ID: <72222DC86846D411ABD300A0C9EB08A156FF19@csoc-mail-box.csoconline.com>
To: "'iwar@yahoogroups.com'" <iwar@yahoogroups.com>
X-Mailer: Internet Mail Service (5.5.2653.19)
From: "Leo, Ross" <Ross.Leo@csoconline.com>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Fri, 21 Sep 2001 09:43:21 -0500
Reply-To: iwar@yahoogroups.com
Subject: RE: [iwar] [news] A 'Tarpit' That Traps Worms
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

The "LaBrea" tarpit tool sounds good.  After reading the SecurityFocus
article, and other opinions on it, it does appear that placement of the tool
is a major factor in how well it will succeed.  Once again, the much
hoped-for "technological paradigm shift" against hacking and other nasties
hasn't shifted quite far enough.  Silver bullets and panaceas still seem to
be in vanishingly short supply.  

I tend to agree with Rob Rosenberger that, in the final analysis, the
problem is a people/attitude issue, and not truly a technological one.  Not
a new or surprising theory, but I think accurate.

Ross Leo


-----Original Message-----
From: Srijith.K [mailto:srijith@srijith.net]
Sent: Thursday, September 20, 2001 23:08
To: iwar@yahoogroups.com
Subject: [iwar] [news] A 'Tarpit' That Traps Worms


Source: http://www.wired.com/news/technology/0,1282,46964,00.html

A 'Tarpit' That Traps Worms 
By Michelle Delio 

9:35 a.m. Sep. 19, 2001 PDT  
      
 Network administrators now have a hacking tool that can help them 
strike back at malicious attackers. 

"LaBrea" is a free, open-source tool that deters worms and other hack 
attacks by transforming unused network resources into decoy-computers 
that appear and act just like normal machines on a network. But when 
malicious hackers or mindless worms such as Nimda or Code Red attempt 
to connect with a LaBrea-equipped system, they get sucked into a 
virtual tarpit that grabs their computer's connection -- and doesn't 
release it. 

(...)




------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 


------------------------ Yahoo! Groups Sponsor ---------------------~-->
Pinpoint the right security solution for your company- Learn how to add 128- bit encryption and to authenticate your web site with VeriSign's FREE guide!
http://us.click.yahoo.com/JNm9_D/33_CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:46 PDT