RE: [MLUG - DISCUSSION] Network Spyware Scanner

["Brent Deterding" <EMAIL:PROTECTED>]

Many times spyware doesn't have a network signature - at least not an open port
- only a signature on the system.  

The problem with spyware is the lack of enterprise-class distribution. I  expect
Cisco or ISS or someone will buy up Ad-Aware and put some decent
management/distribution into it and make a lot of money.

-- Brent

> -----Original Message-----
> From: EMAIL:PROTECTED 
> [mailto:EMAIL:PROTECTED] On Behalf Of 
> Spurling, Shannon
> Sent: Friday, April 30, 2004 9:16 AM
> To: MLUG Off-Topic Discussion
> Subject: RE: [MLUG - DISCUSSION] Network Spyware Scanner
> 
> That's a good question. It might even be good to use to 
> detect worms and such. You could have it be active or 
> passive. Active, it would scan for ports open by worms or 
> malware. Passive, it would watch for tell tale signs of 
> spyware and malware calling home. The difficulty would be 
> placement and the typical issues you run into with IDS systems.
> I think it's a good idea.  
> 
> Shannon Spurling
> WAN Engineer -Specialist
> 
> MOREnet, Network Services, Core Network
> 3212 LeMone Industrial Blvd.
> Columbia, MO 65201
> 
> Main:(573) 884-7200   Fax:(573)884-6673
> 
> EMAIL:PROTECTED
> EMAIL:PROTECTED
> 
> 
> -----Original Message-----
> From: EMAIL:PROTECTED
> [mailto:EMAIL:PROTECTED] On Behalf Of 
> Jerry Gamblin
> Sent: Friday, April 30, 2004 9:06 AM
> To: MLUG Off-Topic Discussion
> Subject: [MLUG - DISCUSSION] Network Spyware Scanner
> 
> Why hasn't anyone written a network spyware scanner yet? You 
> think it would be the next logical step for a company like 
> LavaSoft to port their software to a network aware version.
> 
> 
> Jerry Gamblin
> Network Security Specialist
> Linn State Technical College
> One Technology Drive
> Linn, MO 65051
> EMAIL:PROTECTED
> www.linnstate.edu
> 573-897-5240 
> 
> 
> NOTE: 
> 
> This e-mail transmission may contain confidential information.  
> If you are not the intended recipient, employee or agent 
> responsible for delivering this information to the intended 
> recipient, unauthorized disclosure, copying, distribution or 
> use of the contents of this transmission is strictly 
> prohibited.  If you have received this e-mail in error, 
> please immediately notify the sender and delete it from your 
> computer. Thank you for your compliance.
> 
> _______________________________________________
> discussion mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/discussion
> 
> 
> 
> _______________________________________________
> discussion mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/discussion
> 

_______________________________________________
discussion mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/discussion