Microsoft Researchers Target Worms, Buffer Overruns

Advertisement (Why?)

Microsoft researchers showed off some forward-looking technologies this week, including new ways to protect systems against Internet worms, prevent hacker attacks, and measure available bandwidth on home networks. At its fifth annual TechFest, Microsoft Research presented about 150 projects here at the company's headquarters. The event was expected to attract about 6000 Microsoft employees. Its main purpose is to promote the exchange of ideas, or "tech transfers," between Microsoft Research and product teams at the software maker.

One of the technologies on display, dubbed Vigilante, proposes a detection and protection system for Internet worms. The system would consist of "honey pot" computers connected to the Internet that would serve as bait for the worms. Once an attack was detected, the computers would analyze the attack and create alerts that included details on how to protect against the new threat. The alerts then would be pushed out to other computers, which would automatically put up shields and filter traffic to block the worm, Microsoft researchers said.

View: The full story

News source: PCWorld

Thanks JCAP for the heads-up on this one

#1 Hekx on 04 Mar 2005 - 12:57

I say they should go after rootkits too.

(4 replies) #2 mohan_168 on 04 Mar 2005 - 13:22

MS said that rootkits are going to be a headache in the near future. I dont think there is any software that can stop it as of yet

#2.1 EduardValencia on 04 Mar 2005 - 16:31

Strider GhostBuster (developed by microsoft

)can detect rootkits by comparing clean and suspect versions of Windows and looking for differences that may indicate that a kernel rootkit is running.

#2.2 ichi on 04 Mar 2005 - 23:57

Tripwire.

#2.3 antareus on 05 Mar 2005 - 06:57

How about not running your computer as administrator all the time?

#2.4 MrCobra on 07 Mar 2005 - 08:57

I have to agree with you there. Most of the ones that complain about all the major problems they're having with XP is the fact that by default they are administrator. Until everyone learns not to give themselves admin rights the preventable problems will persist.

#3 Nelsinho on 04 Mar 2005 - 13:41

hmm, good news, I think what any attempt to eliminate worms, malwares etc is valid of course, go Microsoft in the news projects although is impossible to control all of them unfortunately

#4 Blaine on 04 Mar 2005 - 14:27

wow thats neat

#5 Atmos42 on 04 Mar 2005 - 15:47

I'm amazed to see "forward-looking" and Microsoft in the same article!

Great idea for worm prevention although I wonder when some enterprising moron, I mean worm writer will figure out a way around it.

(4 replies) #6 stupiduglyfool on 04 Mar 2005 - 15:59

microsoft do not innovate, they merely steal other peoples ideas, for example the honey pot technique is been succesfully used against harvesting email addresses..

http://www.projecthoneypot.org/

#6.1 markjensen on 04 Mar 2005 - 17:44

Stealing???

It's a good idea. It is common sense. It is not patented.
I would call this using a good (and previously established) method.

I have no love for Microsoft, nor do I use their products (at home, anyhow), but lighten up on your reaction a bit.

#6.2 kitchenutensils on 04 Mar 2005 - 19:42

its true what hes sating, but as long as microsoft doesn't claim to innovate where it hasn't then there is no problem.

#6.3 PCyr on 04 Mar 2005 - 21:39

QUOTE

microsoft do not innovate, they merely steal other peoples ideas

Oh please, stop being a drama queen. There's a big difference between not inovating and stealing.

#6.4 cpu on 05 Mar 2005 - 10:18

oh, common! Than it is same to say that the company wrote the first antivirus is only the true. The rest are stealing the idea

#7 Hills420 on 04 Mar 2005 - 19:39

These sound pretty cool...

#8 Boxster17 on 04 Mar 2005 - 19:41

I frankly wouldn't care if none of their ideas were their own, as long as it's making Windows safer for me, then I'm all for it. And like markjensen said, it's not stealing, it's just using a good method to make computers more secure...

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Neowin.net