Home > Store > Security > Network Security
Crimeware: Understanding New Attacks and Defenses
- By Markus Jakobsson, Zulfikar Ramzan
- Published Apr 6, 2008 by Addison-Wesley Professional. Part of the Symantec Press series.
- Copyright 2008
- Dimensions: 7x9-1/4
- Pages: 608
- Edition: 1st
- Book
- ISBN-10: 0-321-50195-0
- ISBN-13: 978-0-321-50195-0
Register your product to gain access to bonus material or receive a coupon.
Product Author Bios
Markus Jakobsson, Ph.D., is currently principal scientist at Palo Alto Research Center and an adjunct associate professor at Indiana University. The coauthor of more than one hundred peer-reviewed articles and co-inventor of more than fifty patents, Markus studies the human factor of security and cryptographic protocols with an emphasis on privacy.
Zulfikar Ramzan, Ph.D., is currently a senior principal researcher with Symantec Security Response. Coauthor of more than fifty technical articles and one other book, Zulfikar is a frequent speaker on his areas of expertise: theoretical and practical aspects of information security and cryptography.
“This book is the most current and comprehensive analysis of the state of Internet security threats right now. The review of current issues and predictions about problems years away are critical for truly understanding crimeware. Every concerned person should have a copy and use it for reference.”
—Garth Bruen, Project KnujOn Designer
There’s a new breed of online predators—serious criminals intent on stealing big bucks and top-secret information—and their weapons of choice are a dangerous array of tools called “crimeware.” With an ever-growing number of companies, organizations, and individuals turning to the Internet to get things done, there’s an urgent need to understand and prevent these online threats.
Crimeware: Understanding New Attacks and Defenses will help security professionals, technical managers, students, and researchers understand and prevent specific crimeware threats. This book guides you through the essential security principles, techniques, and countermeasures to keep you one step ahead of the criminals, regardless of evolving technology and tactics. Security experts Markus Jakobsson and Zulfikar Ramzan have brought together chapter contributors who are among the best and the brightest in the security industry. Together, they will help you understand how crimeware works, how to identify it, and how to prevent future attacks before your company’s valuable information falls into the wrong hands. In self-contained chapters that go into varying degrees of depth, the book provides a thorough overview of crimeware, including not only concepts prevalent in the wild, but also ideas that so far have only been seen inside the laboratory.
With this book, you will
- Understand current and emerging security threats including rootkits, bot networks, spyware, adware, and click fraud
- Recognize the interaction between various crimeware threats
- Gain awareness of the social, political, and legal implications of these threats
- Learn valuable countermeasures to stop crimeware in its tracks, now and in the future
- Acquire insight into future security trends and threats, and create an effective defense plan
With contributions by Gary McGraw, Andrew Tanenbaum, Dave Cole, Oliver Friedrichs, Peter Ferrie, and others.
|
13 of 13 people found the following review helpful
Academically solid, well researched, yet practical, By
This review is from: Crimeware: Understanding New Attacks and Defenses (Paperback)
Crimeware by Jakobsson and Ramzan sets a new standard for security books. It is both eminently pragmatic and at the same time, a scholarly work. I thought I knew a bit about malware, but I learned tons from the book. I struggled a bit with 16.2 Crimeware-Resistant Authentication and encourage the authors to take another look at that when they do second edition and this book simply must have a second edition. It will also be interesting to see if the taxonomy, chapter 2 takes hold. It would seem like we need a bit more of a classification system than Joanna Rutkowska's type 1 - 3 for our community.The book gets right down to it, most authors waste the first few chapters with background information. Now to be sure, this is background, but it is pretty deep background. My favorite chapter is 7, botnets, but 6.3 JavaScript is very well done and immediately useful information to know. For a high speed pass, chapter 8 rootkits will get you up to speed, but that needs a whole lot... Read more
4 of 4 people found the following review helpful
Broad, deep, and technically accurate, yet tedious at times, By
This review is from: Crimeware: Understanding New Attacks and Defenses (Paperback)
Crimeware is a collection of chapters collectively written by 40-odd security researchers. Sometimes this approach is a formula for disaster, but here the end result is a solid book that covers a broad number of topics. Because each author or group of authors know their field well, they can delve fairly deeply when necessary, and their material is technically accurate. However, some of the chapters are boring and lifeless. This book blocked my reading queue for about 4 months, which is a sign I found the text unappealing. It took a flight from Amsterdam to convince me to finish it! Still, I agree with many of the other reviewers -- Crimeware is an impressive examination of malware, on a variety of fronts.Chapter 8: Rootkits, by Prashant Pathak, was my favorite. I've read books on rootkits before, by Pathak's chapter presented the subject in a very understandable manner. His methodical and disciplined approach seemed very effective. He explained various approaches... Read more
4 of 4 people found the following review helpful
Great book for knowing how the bad guys are working overtime, By
This review is from: Crimeware: Understanding New Attacks and Defenses (Paperback)
If you are looking for a book to show you what the bad guys are doing with computers to steal data or comprise systems then this is the book for you.I really enjoyed chapter 7 on Bot Networks. Like most of the other chapters it covers the basics of the topic, then digs deeper into the workings of the subject. And if you really want deep detail the ending sections go into extremely deep details (the book says these sections may only be of interest to security researchers). Some of the ending sections were over my head. But, the ones I did understand opened my eyes to those topics in a different light. This book will be on my reference shelf for quite sometime due to the detail and range of topics covered. |
Online Sample Chapter
Cybercrime and Politics: The Dangers of the Internet in Elections
Table of Contents
Preface xvii
About the Authors xxi
Chapter 1: Overview of Crimeware 1
1.1 Introduction 2
1.2 Prevalence of Crimeware 4
1.3 Crimeware Threat Model and Taxonomy 5
1.4 A Crimeware Menagerie 8
1.5 Crimeware Distribution 19
1.6 Infection and Compromise Points, Chokepoints, and Countermeasures 25
1.7 Crimeware Installation 29
1.8 Crimeware Usage 31
1.9 Organizing Principles for the Remainder of This Text 35
Chapter 2: A Taxonomy of Coding Errors 37
2.1 The Trinity of Trouble 38
2.2 The Seven Pernicious Kingdoms 40
2.3 The Phyla 46
2.4 More Phyla Needed 52
Chapter 3: Crimeware and Peer-to-Peer Networks 55
3.1 Malware in Peer-to-Peer Networks 55
3.2 Human-Propagated Crimeware 76
Chapter 4: Crimeware in Small Devices 83
4.1 Propagation Through USB Drives 83
4.2 Radio Frequency ID Crimeware 89
4.3 Mobile Crimeware 99
Chapter 5: Crimeware in Firmware 103
5.1 Propagation by Firmware Updates 103
5.2 Modeling WiFi Malware Epidemics 130
Chapter 6: Crimeware in the Browser 155
6.1 Transaction Generators: Rootkits for the Web 155
6.2 Drive-By Pharming 160
6.3 Using JavaScript to Commit Click Fraud 167
Chapter 7: Bot Networks 183
7.1 Introduction 183
7.2 Network-Oriented Features of Botnets 188
7.3 Software Features of Bots 205
7.4 Web Bots and the General Future of Botnets 215
7.5 Countermeasures 224
Chapter 8: Rootkits 229
8.1 Introduction 229
8.2 Evolution of Rootkits 231
8.3 User-Mode Windows Rootkits 233
8.4 Kernel-Mode Rootkit Techniques 240
8.5 Linux Rootkits 260
8.6 BIOS Rootkits 264
8.7 PCI Rootkits 265
8.8 Virtual Machine—Based Rootkits 267
8.9 Rootkit Defense 271
Chapter 9: Virtual Worlds and Fraud 275
9.1 Introduction 275
9.2 MMOGs as a Domain for Fraud 278
9.3 Electronic Fraud 283
9.4 Fraud in MMOGs 285
Chapter 10: Cybercrime and Politics 293
10.1 Domain Name Abuse 295
10.2 Campaign-Targeted Phishing 307
10.2.1 Profit-Motivated Phishing 307
10.3 Malicious Code and Security Risks 312
10.4 Denial-of-Service Attacks 315
10.5 Cognitive Election Hacking 316
10.6 Public Voter Information Sources: FEC Databases 319
10.7 Intercepting Voice Communications 320
Chapter 11: Online Advertising Fraud 325
11.1 History 325
11.2 Revenue Models 326
11.3 Types of Spam 332
11.4 Forms of Attack 335
11.5 Countermeasures 342
11.6 Click Fraud Auditing 347
11.7 The Economics of Click Fraud 352
Chapter 12: Crimeware Business Models 355
12.1 The Crimeware Business 355
12.2 A Closer Look at Adware 386
Chapter 13: The Educational Aspect of Security 397
13.1 Why Education? 397
13.2 Case Study: A Cartoon Approach 408
Chapter 14: Surreptitious Code and the Law 413
14.1 Introduction 413
14.2 The Characteristics of Surreptitious Code 415
14.3 Primary Applicable Laws 418
14.4 Secondary Applicable Laws 430
Chapter 15: Crimeware and Trusted Computing 457
15.1 Introduction 457
15.2 Anatomy of an Attack 458
15.3 Combating Crimeware with Trusted Computing 460
15.4 Case Studies 466
Chapter 16: Technical Defense Techniques 473
16.1 Case Study: Defense-in-Depth Against Spyware 475
16.2 Crimeware-Resistant Authentication 484
16.3 Virtual Machines as a Crimeware Defense Mechanism 510
Chapter 17: The Future of Crimeware 515
17.1 Crimeware, Terrorware, Vandalware, and Ransomware 515
17.2 New Applications and Platforms 517
17.3 Using Social Networks to Bootstrap Attacks 520
17.4 New Use of the Internet: Controlling the Infrastructure 520
17.5 Moving Up the Stack 520
17.6 The Emergence of an E-Society: Are We Becoming More Vulnerable? 521
17.7 The Big Picture 522
References 525
Index 557
Sample Pages
This book includes free shipping!
- Request an Instructor or Media review copy.
- Corporate, Academic, and Employee Purchases
- International Buying Options
Get access to thousands of books and training videos about technology, professional development and digital media from more than 40 leading publishers, including Addison-Wesley, Prentice Hall, Cisco Press, IBM Press, O'Reilly Media, Wrox, Apress, and many more. If you continue your subscription after your 30-day trial, you can receive 30% off a monthly subscription to the Safari Library for up to 12 months. That's a total savings of $199.
