IT Observer - Inoculating SSH Against Address-Harvesting Worms

ÊAdvertise
ÊContact
ÊSecurityWatch

GFI MailArchiver for Exchange - Easily archive Exchange Server mail & comply with Sarbanes Oxley - Free evaluation available.

Network Security Software - Sponsored by GFI Network Security.

Inoculating SSH Against Address-Harvesting Worms
Added: Thursday, 12 May 2005
Publisher: MIT
Category: Network Security

Address harvesting is the act of searching a compromised host for addresses of other hosts to attack. Secure Shell (SSH), the tool of choice for administering and communicating with mission-critical hosts, securitycritical hosts, and even some routers, leaves each user’s list of previously contacted hosts open to harvest by anyone who compromises the user’s account.

Attackers have combined address harvesting with myriad mechanisms for impersonating a host’s legitimate users to obtain a remote shell via SSH. They have succeeded in breaching systems at major academic, commercial, and government institutions. In this paper, we detail the threat posed should attackers automate this mode of attack to create a self-propagating worm.

Download | InfoSec Directory

Monday, May 23, 2005

Network Security

	Hackers get tricky with pharming
	Hiring a hacker? Think again, experts warn
	Why security vulnerabilities expand beyond operating system, enterprise
	How Dangerous Was The Cisco Code Theft?

Wireless Security

	picoChip, Hifn unveil WiMAX basestation reference
	Why wireless devices must be connected to critical applications
	Securing 'strange' Wi-Fi devices
	IT giants fight wireless patent

InfoSec Directory

	Phishing attacks and countermeasures
	< class="leftLink" href="infosec_article.php?articleID=173">Overview of image security techniques with applications in multimedia systems
	Inoculating SSH Against Address-Harvesting Worms
	What is the point of encryption if you don’t know who for?

Press Releases

	nCipher helps combat phishing attacks with Chip and PIN
	LANDesk Named to 2005 Red Herring Top 100
	HP Simplifies Business Protection for Small and Mid-size Businesses with New Smart Office Program
	Clifford Chance appoints Redbus Interhouse to Provide Pan-European Services

:: :: Ê