Malicious software trends John Viega [email_address]

How many outbreaks did we see in 2007?? A: 5 B: 11 C: 87 D: 0 2007 in review – PUP quiz June 3, 2009 

How many outbreaks did we see in 2007??

A: 5

B: 11

C: 87

D: 0

40% of all malware was new in 2007!

How malware gets on machines June 3, 2009

How attackers use your computer

Botnets: recent history June 3, 2009

The tools are stupidly simple…. June 3, 2009

Vulnerabilities June 3, 2009 Source: NIST

Trends in the last 12 months Move towards more distributed and fault tolerant systems Malware communications being encrypted a big move from Europe to China More sophistication in spreading of malware via automation More sophistication in detecting VM’s Selective infections for certain geographical locations Send packages XYZ to people from UK,SE,DK,NO who run windows and have AOL accounts June 3, 2009

Move towards more distributed and fault tolerant systems

Malware communications being encrypted

a big move from Europe to China

More sophistication in spreading of malware via automation

More sophistication in detecting VM’s

Selective infections for certain geographical locations

Send packages XYZ to people from UK,SE,DK,NO

who run windows

and have AOL accounts