Uncovering Malware in Your Website

6
Uncovering Malware in Your Website Learn the fast, online way to find it before your customers do Cecilia Zuvic Jason Kent March 19th, 2013

description

Learn the fast, online way to find malware before your customers do.

Transcript of Uncovering Malware in Your Website

Page 1: Uncovering Malware in Your Website

Uncovering Malware in Your Website Learn the fast, online way to find it before your customers do

Cecilia Zuvic Jason Kent

March 19th, 2013

Page 2: Uncovering Malware in Your Website

Some statistics

2

•Kaspersky estimates 1 in 150 legitimate websites are now serving malware

•Google blacklists about 6000 sites a day •Sophos research discovered 21,000 WebPages were getting infected every day

Page 3: Uncovering Malware in Your Website

Customer’s feedback Why? -Blacklisted -Customer request -Proactive approach - peace of mind What? -Automated -Recommendation on fixes -Alerts - Behavioral analysis

3

Page 4: Uncovering Malware in Your Website

Malware doesn’t discriminate

4

Blind to Vertical or Size

PhotoSharing and RadioShow – I was told

Web Developer – A customer is blacklisted

La Via Celeste - But, I have virus protection

On-line retailer – I need to be ready

Page 5: Uncovering Malware in Your Website

Why do you care?

5

Protect your company – preventing the spread of malware to customers

Protect consumers – reducing the amount in entry points (that a user can be infected with malware)

Protect Enterprises - limiting the number of infected end users

Protect your Company Brand –preventing from

serving malware from their web applications

Avoid getting blacklisted = Save money, time and your company’s reputation

Page 6: Uncovering Malware in Your Website

[email protected] [email protected]

Thank You

© 1999–2013 Qualys, Inc. All rights reserved.

mailto:[email protected]
mailto:[email protected]
mailto:[email protected]

Uncovering fashion

Uncovering fashion

Session Website Security. Session Outline Passwords Data Back-up Anti-virus Software Malware CMS Software.

Session Website Security. Session Outline Passwords Data Back-up Anti-virus Software Malware CMS Software.

UNCOVERING ANTICHOLINERGICS

UNCOVERING ANTICHOLINERGICS

Uncovering STEM

Uncovering STEM

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] Felix.Leder@norman.com 5. desember 2011 malware

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware

Malware Analysis Report: Dark Caracal APT The Pallas · PDF fileCSE CyberSec Enterprise SPA Via G.B. Martini 6, Rome, Italy Email: info@ Website: ZLAB Malware Analysis Report:

Malware Analysis Report: Dark Caracal APT The Pallas · PDF fileCSE CyberSec Enterprise SPA Via G.B. Martini 6, Rome, Italy Email: info@ Website: ZLAB Malware Analysis Report:

SPYWARE & MALWAREcomputerfixed.co.uk › Website Files › Articles › WHAT_IS... · 2013-12-08 · malware: adware spyware hijackers toolbars diallers Many, if not most malware

SPYWARE & MALWAREcomputerfixed.co.uk › Website Files › Articles › WHAT_IS... · 2013-12-08 · malware: adware spyware hijackers toolbars diallers Many, if not most malware

Uncovering Metabolism’s Clockwork

Uncovering Metabolism’s Clockwork

Uncovering Brand Archetypes

Uncovering Brand Archetypes

Website Compromise and Malware Propagation (WCMP)

Website Compromise and Malware Propagation (WCMP)

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Traffic Exchanges

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Traffic Exchanges

UnCovering Religion

UnCovering Religion

Wordpress malware - What is it and how to protect your website.

Wordpress malware - What is it and how to protect your website.

Uncovering - NSTA

Uncovering - NSTA

UNCOVERING DREAMS

UNCOVERING DREAMS

Uncovering Religion

Uncovering Religion

Software and Web Security deel 1 · – malware toolkitsto create or customise malware – (CPU time on) infected machines – internet traffic (access to infected website to infect

Software and Web Security deel 1 · – malware toolkitsto create or customise malware – (CPU time on) infected machines – internet traffic (access to infected website to infect