May 2007 - Posts

Mal(ware)formation statistics

Pedro Bustamante at  28 May 07 12:02    
While catching up on an old but excellent post by jason geffner on reconstructing import tables I remembered that I've been wanting to study the real impact of packers on the latest malware received at our labs. Many of us AV companies are now more
Read More...

Post a Comment: 7 Comments    Category: stats, packers, prevalence     

How TruPrevent Works (I)

Pedro Bustamante at  24 May 07 05:49    
I recently came across an interesting document by Gartner's analyst Neil MacDonald, called Host-Based Intrusion Prevention Systems (HIPS) Update: Why Antivirus and Personal Firewall Technologies Aren't Enough . There is confusion in the market
Read More...

Post a Comment: 21 Comments    Category: behavior analysis     

Malware-friendly countries

Pedro Bustamante at  22 May 07 05:08    
Recently there have been some studies regarding Internet hosting providers which are often used maliciously to distribute malware. As this is an interesting subject we've been tracking quite a few thousand malware samples received over the last few
Read More...

Post a Comment: 2 Comments    Category: stats, malware