RE: [MLUG - DISCUSSION] Network Spyware Scanner

["Brent Deterding" <EMAIL:PROTECTED>]

Let m clarify that :)

The problem with spyware detection/removal programs is lack of enterprise
management/distribution. It needs to have a model like modern AV clients if it
is to succeed.

Thing is - I'm going to retract my statement about it being bought up. I just
don't think big companies give a damn 99% of the time about spyware. 

-- Brent 

> -----Original Message-----
> From: EMAIL:PROTECTED 
> [mailto:EMAIL:PROTECTED] On Behalf Of 
> Brent Deterding
> Sent: Saturday, May 01, 2004 11:26 AM
> To: 'MLUG Off-Topic Discussion'
> Subject: RE: [MLUG - DISCUSSION] Network Spyware Scanner
> 
> Many times spyware doesn't have a network signature - at 
> least not an open port
> - only a signature on the system.  
> 
> The problem with spyware is the lack of enterprise-class 
> distribution. I  expect Cisco or ISS or someone will buy up 
> Ad-Aware and put some decent management/distribution into it 
> and make a lot of money.
> 
> -- Brent
> 
> > -----Original Message-----
> > From: EMAIL:PROTECTED
> > [mailto:EMAIL:PROTECTED] On Behalf Of 
> Spurling, 
> > Shannon
> > Sent: Friday, April 30, 2004 9:16 AM
> > To: MLUG Off-Topic Discussion
> > Subject: RE: [MLUG - DISCUSSION] Network Spyware Scanner
> > 
> > That's a good question. It might even be good to use to 
> detect worms 
> > and such. You could have it be active or passive. Active, it would 
> > scan for ports open by worms or malware. Passive, it would 
> watch for 
> > tell tale signs of spyware and malware calling home. The difficulty 
> > would be placement and the typical issues you run into with IDS 
> > systems.
> > I think it's a good idea.  
> > 
> > Shannon Spurling
> > WAN Engineer -Specialist
> > 
> > MOREnet, Network Services, Core Network
> > 3212 LeMone Industrial Blvd.
> > Columbia, MO 65201
> > 
> > Main:(573) 884-7200   Fax:(573)884-6673
> > 
> > EMAIL:PROTECTED
> > EMAIL:PROTECTED
> > 
> > 
> > -----Original Message-----
> > From: EMAIL:PROTECTED
> > [mailto:EMAIL:PROTECTED] On Behalf Of Jerry 
> > Gamblin
> > Sent: Friday, April 30, 2004 9:06 AM
> > To: MLUG Off-Topic Discussion
> > Subject: [MLUG - DISCUSSION] Network Spyware Scanner
> > 
> > Why hasn't anyone written a network spyware scanner yet? 
> You think it 
> > would be the next logical step for a company like LavaSoft to port 
> > their software to a network aware version.
> > 
> > 
> > Jerry Gamblin
> > Network Security Specialist
> > Linn State Technical College
> > One Technology Drive
> > Linn, MO 65051
> > EMAIL:PROTECTED
> > www.linnstate.edu
> > 573-897-5240
> > 
> > 
> > NOTE: 
> > 
> > This e-mail transmission may contain confidential information.  
> > If you are not the intended recipient, employee or agent 
> responsible 
> > for delivering this information to the intended recipient, 
> > unauthorized disclosure, copying, distribution or use of 
> the contents 
> > of this transmission is strictly prohibited.  If you have received 
> > this e-mail in error, please immediately notify the sender 
> and delete 
> > it from your computer. Thank you for your compliance.
> > 
> > _______________________________________________
> > discussion mailing list
> > EMAIL:PROTECTED
> > http://mlug.missouri.edu/mailman/listinfo/discussion
> > 
> > 
> > 
> > _______________________________________________
> > discussion mailing list
> > EMAIL:PROTECTED
> > http://mlug.missouri.edu/mailman/listinfo/discussion
> > 
> 
> _______________________________________________
> discussion mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/discussion
> 

_______________________________________________
discussion mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/discussion