Thursday, 25 October 2012 11:40

Hackers Get 10 Months to pwn Victims

Written by 
Rate this item
(0 votes)
Hackers Get 10 Months to pwn Victims

"Tell no one, compromise everyone" -- Hackers exploit security vulnerabilities in software for 10 months on average before details of the holes surface in public, according to a new study based on a paper [PDF] on the research - Before We Knew It: An Empirical Study of Zero-Day Attacks In The Real World.

Two researchers from Symantec Research Labs identified 18 zero-day attacks between 2008 and 2011, and 11 of them were previously undetected. “A typical zero-day attack lasts 312 days on average and that, after vulnerabilities are disclosed publicly, the volume of attacks exploiting them increases by up to five orders of magnitude,” the researchers noted.

Researchers from Symantec believe that these zero-day attacks, so called because they are launched well before vendors are even aware of the vulnerabilities, are more prevalent and more potent than previously thought. Zero-day exploits are often closely guarded secrets and can be very valuable to criminals — but once details of the exploited flaws emerge in public, developers and system administrators can get to work to mitigate or halt the attacks.

Source: http://www.theregister.co.uk/2012/10/24/zero_day_study/

Read 305 times Last modified on Thursday, 25 October 2012 11:53
Rich Wermske

I am a native Houstonian, disabled American veteran, aspiring Buddhist, and a 40-Something information technology leader, paralegal, and management wonk, living life on life's terms, with my partner of eleven years.

While I still struggle with humility, I strive to make willingness, honesty, and open-mindedness a cornerstone in all my affairs. I work hard, and I believe I play well with others.  Eleven years of sobriety has taught me that none of "this" means a damn thing if I'm unwilling, dishonest, or close-minded.

While I've lived the roller-coaster, today I rarely have to defend or justify the actions of that person I see looking back at me in the mirror...

Website: www.wermske.com
I don't agree with all of this, but it's food for thought. -rw