Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

Threat Intelligence System Helps Share Malware Data

25.05.2012
As malware threats expand into new domains and increasingly focus on industrial espionage, Georgia Tech researchers are launching a new weapon to help battle the threats: a malware intelligence system that will help corporate and government security officials share information about the attacks they are fighting.

Known as Titan, the system will be at the center of a security community that will help create safety in numbers as companies large and small add their threat data to a knowledge base that will be shared with all participants. Operated by security specialists at the Georgia Tech Research Institute (GTRI), the system builds on a threat analysis foundation – including a malware repository that analyzes and classifies an average of 100,000 pieces of malicious code each day.

“As a university, Georgia Tech is uniquely positioned to take this white hat role in between industry and government,” said Andrew Howard, a GTRI research scientist who is part of the Titan project. “We want to bring communities together to break down the walls between industry and government to provide a trusted, sharing platform.”

Members contributing information will do so anonymously so other members won’t know which specific organizations have been attacked. GTRI will independently verify information provided to Titan and carefully vet the members of the community before they are allowed to participate.

“People tend to think that if an organization gets hit, it was because they had poor security measures,” said Christopher Smoak, a GTRI research scientist who heads up the Titan project. “That’s not necessarily true, because a variety of factors contribute to intrusions. But until we get to the point that there’s no longer a stigma attached to having an infiltration, people are going to want anonymity to participate.”

In addition to receiving information about attacks and responses at other organizations, members will receive quick reports on malware samples they submit. Based on what they have learned from the malware repository and by reverse-engineering malicious code, GTRI researchers will be able to provide information on the potential harm from an attack, the likely source, the best remedy for it and the risks to the organization.

“We hope to provide information about the trends that organizations can expect to see, and help them prioritize what they should do to address the risks,” said Howard. “We have a significant system behind the scenes to facilitate the exchange of information.”

Titan will be especially valuable to smaller organizations that lack the resources to operate their own security evaluation labs, though all members will benefit from sharing information. GTRI information security researchers collaborate with the Georgia Tech Information Security Center (GTISC), which expands the depth of knowledge.

“GTRI will maintain the shared resources that companies can use to help solve their own problems,” Smoak noted. “We’ll have many organizations contributing to this community, and everyone getting information out; it will really benefit everyone.”

Companies today have two primary concerns about malicious software, Howard said. The first is for the loss of intellectual property, such as plans for a new product or bidding documents for a major project. The second is a compromise of the web infrastructure that many companies rely on to do business.

Titan will also help companies educate their computer users about such risks as spear-phishing, which uses email that appears to be from a trusted colleague or friend to trick users into taking a risky action, such a opening an infected attachment. The system will alert companies to the newest threat trends so they can warn their users, and identify the IP addresses that malicious software is communicating with.

“Spear-phishing is very difficult to defend against, because all it takes is one person clicking on something that lets malware into the network,” Smoak said. “It’s difficult to train a large workforce with varying skill sets to identify the very small nuances that indicate these emails are malicious.”

GTRI has been analyzing the malware attacking Windows-based computers for years. Now the analysts are seeing an increase in malicious code designed for Android-based devices – and for Macintosh computers, which previously hadn’t been high-priority targets.

“We see Android malware in its infancy right now,” said Smoak. “We see what it is doing and how it is working, and we can draw parallels to what we saw earlier with the Windows-based malware. We can probably expect to see the Android and Mac malware follow a similar path.”

The danger may be especially great for the users of computer systems that previously had not worried much about malware.

“For Macintosh systems, the threats are starting to get scarier,” Howard said. “When more malware authors shift their focus to this platform, a lot of people who thought they were safe by not using the Windows OS will be caught off-guard.”

Titan now includes half a dozen Fortune 500 members, along with other government and nonprofit organizations. Smoak and Howard have been getting feedback from those members as they’ve built the system, which will be formally launched in a few months.

“We are looking for additional industry partners to help us use the tool and help refine the system,” said Howard. “We believe that members of this community will come together to help each other strengthen defenses.”

A determined hacker will probably succeed in compromising most corporate computer networks, but the researchers believe Titan can help companies make that as difficult as possible.

“You may not be able to completely prevent an attack, but you can have a higher wall and stronger defense,” Howard said. “Hackers tend to go after the low-hanging fruit, so they will attack the companies that are the easiest to attack. We believe that our community can help all the members strengthen their defenses.”

Research News & Publications Office
Georgia Institute of Technology
75 Fifth Street, N.W., Suite 314
Atlanta, Georgia 30308 USA
Media Relations Contacts: John Toon (404-894-6986)(jtoon@gatech.edu) or Abby Robinson (404-385-3364)(abby@innovate.gatech.edu) or Kirk Englehardt (404-894-6015)(kirk.englehardt@comm.gatech.edu).

Writer: John Toon

John Toon | Newswise Science News
Further information:
http://www.gatech.edu

Further reports about: Android-SDK GTRI Intelligence Macintosh Malware Titan Arum computer network

More articles from Information Technology:

nachricht NASA CubeSat to test miniaturized weather satellite technology
10.11.2017 | NASA/Goddard Space Flight Center

nachricht New approach uses light instead of robots to assemble electronic components
08.11.2017 | The Optical Society

All articles from Information Technology >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: Nanoparticles help with malaria diagnosis – new rapid test in development

The WHO reports an estimated 429,000 malaria deaths each year. The disease mostly affects tropical and subtropical regions and in particular the African continent. The Fraunhofer Institute for Silicate Research ISC teamed up with the Fraunhofer Institute for Molecular Biology and Applied Ecology IME and the Institute of Tropical Medicine at the University of Tübingen for a new test method to detect malaria parasites in blood. The idea of the research project “NanoFRET” is to develop a highly sensitive and reliable rapid diagnostic test so that patient treatment can begin as early as possible.

Malaria is caused by parasites transmitted by mosquito bite. The most dangerous form of malaria is malaria tropica. Left untreated, it is fatal in most cases....

Im Focus: A “cosmic snake” reveals the structure of remote galaxies

The formation of stars in distant galaxies is still largely unexplored. For the first time, astron-omers at the University of Geneva have now been able to closely observe a star system six billion light-years away. In doing so, they are confirming earlier simulations made by the University of Zurich. One special effect is made possible by the multiple reflections of images that run through the cosmos like a snake.

Today, astronomers have a pretty accurate idea of how stars were formed in the recent cosmic past. But do these laws also apply to older galaxies? For around a...

Im Focus: Visual intelligence is not the same as IQ

Just because someone is smart and well-motivated doesn't mean he or she can learn the visual skills needed to excel at tasks like matching fingerprints, interpreting medical X-rays, keeping track of aircraft on radar displays or forensic face matching.

That is the implication of a new study which shows for the first time that there is a broad range of differences in people's visual ability and that these...

Im Focus: Novel Nano-CT device creates high-resolution 3D-X-rays of tiny velvet worm legs

Computer Tomography (CT) is a standard procedure in hospitals, but so far, the technology has not been suitable for imaging extremely small objects. In PNAS, a team from the Technical University of Munich (TUM) describes a Nano-CT device that creates three-dimensional x-ray images at resolutions up to 100 nanometers. The first test application: Together with colleagues from the University of Kassel and Helmholtz-Zentrum Geesthacht the researchers analyzed the locomotory system of a velvet worm.

During a CT analysis, the object under investigation is x-rayed and a detector measures the respective amount of radiation absorbed from various angles....

Im Focus: Researchers Develop Data Bus for Quantum Computer

The quantum world is fragile; error correction codes are needed to protect the information stored in a quantum object from the deteriorating effects of noise. Quantum physicists in Innsbruck have developed a protocol to pass quantum information between differently encoded building blocks of a future quantum computer, such as processors and memories. Scientists may use this protocol in the future to build a data bus for quantum computers. The researchers have published their work in the journal Nature Communications.

Future quantum computers will be able to solve problems where conventional computers fail today. We are still far away from any large-scale implementation,...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

Event News

Ecology Across Borders: International conference brings together 1,500 ecologists

15.11.2017 | Event News

Road into laboratory: Users discuss biaxial fatigue-testing for car and truck wheel

15.11.2017 | Event News

#Berlin5GWeek: The right network for Industry 4.0

30.10.2017 | Event News

 
Latest News

Previous evidence of water on mars now identified as grainflows

21.11.2017 | Physics and Astronomy

NASA's James Webb Space Telescope completes final cryogenic testing

21.11.2017 | Physics and Astronomy

New catalyst controls activation of a carbon-hydrogen bond

21.11.2017 | Life Sciences

VideoLinks
B2B-VideoLinks
More VideoLinks >>>