Meta tags:

Headings (most frequently used words):

blog, 2009, malware, tuesday, 2008, about, web, neil, 13, june, wednesday, to, of, based, time, daswani, monday, july, 16, may, 27, december, 17, november, 11, sunday, april, subscribe, become, follower, this, mobile, learn, more, security, disclaimer, archive, me, free, stanford, webinar, 14, the, spread, and, new, defenses, introducing, dasient, anti, wam, obama, gets, serious, cybersecurity, attacks, at, an, all, high, mobilize, rampant, drive, by, downloads, crimeware, it, out,

Text of the page (most frequently used words):
the (135), and (103), that (61), web (49), malware (42), are (31), #dasient (27), for (22), with (20), can (20), neil (19), this (19), more (18), been (16), site (16), daswani (15), about (14), #security (14), have (14), http (14), com (14), sites (13), new (13), you (13), based (13), service (13), wam (13), has (12), infected (12), www (12), not (11), they (11), google (11), anti (11), also (10), from (10), internet (10), will (10), attacks (9), but (9), websites (9), monitoring (9), providers (9), free (8), 2009 (8), your (8), posted (8), like (8), customers (8), 2008 (7), blog (7), those (7), years (7), last (7), when (7), their (7), search (7), there (7), time (7), infections (7), available (7), news (7), cyber (7), first (7), now (7), legitimate (7), april (6), spread (6), pages (6), comments (6), book (6), defenses (6), out (6), which (6), problem (6), large (6), revenue (6), than (6), scale (6), quarantining (6), beta (6), june (5), may (5), stanford (5), these (5), over (5), while (5), conference (5), such (5), drive (5), get (5), attack (5), browsers (5), users (5), systems (5), information (5), neildaswani (5), blacklist (5), today (5), cybersecurity (5), our (5), visitors (5), traffic (5), hosting (5), malicious (5), past (4), one (4), week (4), defense (4), into (4), only (4), great (4), downloads (4), simply (4), following (4), cybercrime (4), some (4), work (4), yahoo (4), mcafee (4), much (4), engines (4), help (4), blacklisted (4), even (4), sincerely (4), its (4), two (4), businesses (4), used (4), increase (4), significant (4), threat (4), applications (4), private (4), need (4), automated (4), reputation (4), diagnostic (4), webpages (4), code (4), sign (4), monitors (4), complete (3), july (3), december (3), 2007 (3), january (3), webinar (3), learn (3), become (3), address (3), online (3), make (3), cybercriminals (3), officially (3), many (3), people (3), was (3), along (3), crimeware (3), provide (3), high (3), addition (3), infect (3), website (3), required (3), growing (3), due (3), doing (3), protected (3), computer (3), provides (3), firefox (3), chrome (3), microsoft (3), protection (3), part (3), good (3), working (3), hope (3), down (3), click (3), what (3), know (3), tuesday (3), might (3), crime (3), coming (3), international (3), fbi (3), industry (3), solutions (3), together (3), york (3), talking (3), talk (3), between (3), already (3), result (3), found (3), physical (3), any (3), all (3), virus (3), numbers (3), obama (3), dollars (3), building (3), defend (3), world (3), companies (3), expertise (3), against (3), speed (3), automatically (3), before (3), technology (3), premium (3), being (3), direct (3), public (3), desktop (3), losses (3), here (3), threats (3), november (2), email (2), subscribe (2), posts (2), few (2), teenagers (2), viruses (2), financially (2), motivated (2), released (2), most (2), comprehensive (2), aware (2), software (2), able (2), chapters (2), topics (2), browser (2), technical (2), highly (2), advertising (2), comment (2), rampant (2), machine (2), visit (2), links (2), user (2), month (2), economy (2), area (2), searching (2), harm (2), below (2), results (2), similar (2), protections (2), partnership (2), protect (2), false (2), gets (2), though (2), unsuspecting (2), don (2), botnets (2), resulting (2), keep (2), tinyurl (2), next (2), explorer (2), post (2), stock (2), market (2), going (2), expect (2), rates (2), trend (2), per (2), bad (2), guys (2), mobilize (2), reaching (2), borders (2), helping (2), develop (2), organized (2), rise (2), please (2), feel (2), interested (2), included (2), job (2), least (2), founders (2), started (2), company (2), loss (2), criminal (2), activity (2), right (2), phd (2), protecting (2), times (2), report (2), wednesday (2), previous (2), year (2), size (2), long (2), regarded (2), emerging (2), clear (2), vector (2), existing (2), fast (2), president (2), laid (2), day (2), principles (2), his (2), policy (2), including (2), collaborate (2), sector (2), lot (2), support (2), them (2), see (2), taxpayer (2), remaining (2), way (2), contractors (2), said (2), universities (2), parts (2), approach (2), million (2), administration (2), taking (2), look (2), forward (2), commerce (2), reported (2), ameet (2), ranadive (2), shariq (2), rizvi (2), identify (2), quarantine (2), former (2), engineers (2), continually (2), customer (2), provided (2), contains (2), flagged (2), join (2), distributed (2), elements (2), infection (2), thousands (2), identifies (2), blacklisting (2), norton (2), cases (2), sharp (2), makes (2), owners (2), fundamental (2), shift (2), hackers (2), turn (2), delivery (2), solution (2), compromise (2), then (2), suffer (2), release (2), space (2), making (2), number (2), compromised (2), distribution (2), how (2), trends (2), view, profile, march, august, october, archive, personal, views, expressed, mine, alone, employer, disclaimer, mobile, follower, enter, atom, home, older, biggest, shifts, impacting, longer, primarily, conducted, writing, worms, name, themselves, instead, executed, entitled, markus, jakobsson, zulfikar, ramzan, compilation, date, cataloguing, different, ways, manipulate, money, pick, copy, bookstore, rsa, chapter, authored, yours, truly, distinguished, team, googlers, appears, dan, boneh, taxonomy, coding, errors, gary, mcgraw, techniques, peter, ferrie, deep, dives, describe, vulnerabilities, cyberattacks, prey, guide, level, read, cios, csos, researchers, encourage, checking, fraud, understanding, sunday, folks, clicking, interaction, loads, page, link, article, sample, economic, downturn, flagging, displaying, message, saying, list, wherever, happen, browsing, through, feature, called, safesearch, deployed, finally, slated, detection, avoid, positives, really, potentially, expense, negatives, does, crack, aggressively, growth, curtailed, thoughts, questions, let, fighting, fight, advanced, certificate, program, foundations, every, programmer, needs, 33xs6g, 2286xw, version, informationweek, showarticle, jhtml, jsessionid, y132jjqo0yumiqsndlrskh0cjunn2jvn, articleid, 212101494, cid, tab_art_int, arstechnica, ars, 20081023, writers, ratchet, tanks, html, theregister, drive_by_download_mass_attack, interesting, note, current, indications, same, global, markets, contracting, germans, believe, regulation, improved, starting, instance, beyond, organize, law, enforcement, academia, fordam, university, city, sessions, sandra, stanar, johnson, senior, executive, nsa, national, initiative, darren, mott, special, agent, division, eastern, european, giving, tie, something, joint, partners, were, left, lofty, stellar, problems, arise, say, too, stealth, mode, undoubtedly, come, build, community, raise, awareness, oxford, institue, berkman, center, society, stopbadware, org, register, organization, iccs, likely, wreak, havoc, credit, crisis, symantec, estimates, economies, booming, reports, winning, panda, labs, study, correlation, drops, continued, virtual, criminology, couple, weeks, period, mark, annotation, exceeded, 200, 000, 229, 980, rapid, propagation, download, named, compromising, serve, sophisticated, surface, far, pace, moving, gumblar, late, after, net, neutrality, necessity, importance, privacy, invest, merit, hopeful, details, fleshed, months, glad, committed, billions, behind, find, places, actually, traditional, done, amazing, helped, smaller, where, lies, experience, learned, big, difference, having, incorporating, indeed, toward, employing, human, hacker, soldiers, include, nature, changed, strategies, change, very, thrilled, seems, aggressive, ever, government, continue, grow, platform, enables, safely, communicate, conduct, variant, generators, produced, saw, twenty, prior, fairly, clean, slate, review, white, house, serious, protects, monitor, cause, founded, mckinsey, strategy, consultant, backed, group, seed, investors, who, invested, verisign, citrix, twitter, digg, tumbleweed, finjan, pricing, services, built, set, behavioral, analysis, technologies, crawl, identifying, tools, made, server, module, installed, conjunction, soon, diagnosed, serving, question, prevents, spreading, broadly, keeps, continuously, generated, content, third, party, widgets, advertisements, other, vulnerable, identified, notified, detailed, source, urls, subscription, basis, diagnosis, regularly, blacklists, instant, alerts, announcing, updates, patent, pending, alpha, testing, since, early, immediate, redirected, warning, dangerous, causes, drop, depriving, owner, damaging, brand, spurring, additional, costs, each, often, without, knowledge, complexity, extremely, difficult, fix, occurred, seen, founder, using, mutable, vehicles, core, requires, function, exactly, had, mind, designed, palo, alto, introduced, class, use, diagnoses, helps, introduces, addresses, press, excited, bringing, necessary, looking, feedback, stay, tuned, further, insights, development, openly, element, both, offering, want, jump, full, text, ready, away, head, just, reasons, proud, opening, broader, audience, call, quarantines, arrived, estimated, total, ie8, seeing, double, digit, hits, exploding, 600, quite, bit, latest, focusing, specifically, kind, vehicle, introducing, everyone, tomorrow, still, hours, got, signed, thing, webinars, limit, upon, amount, room, title, abstract, frontier, write, attachments, propagate, plant, loaded, present, newly, researched, data, statistics, surrounding, recent, mean, professionals, process, running, discuss, variety, novel, pros, cons, focus, prevent, detect, diagnose, scpd, edu, publiccoursesearchdetails, method, load, courseid, 4131780, monday,

Text of the page (random words):
e development of new web based threats here is the press release dasient introduces first web anti malware service addresses growing need for protection from new web based attacks palo alto june 16 2009 dasient today introduced the industry s first service to protect companies against a fast growing class of web based attacks that compromise legitimate websites and then use them to spread malware to the sites visitors dasient s new web anti malware wam service continually monitors websites diagnoses any infections and helps businesses address the infections before the sites suffer significant losses in traffic revenue and reputation in the last two years we ve seen a fundamental shift in the way malware is spread said dasient co founder dr neil daswani hackers are using highly automated and mutable attacks to turn websites into delivery vehicles for malicious software this is a web problem at its core and it requires a solution that can function at web speed and web scale that s exactly what we had in mind when we designed the dasient wam service sharp increase in malware infected webpages each day thousands of legitimate websites are infected with malicious code often without their knowledge the speed scale and complexity of these attacks makes it extremely difficult for website owners to identify and fix the resulting infections and in some cases to even know they ve occurred the most immediate result of web malware infection is blacklisting by search engines like google and yahoo browsers like internet explorer firefox and chrome and desktop anti virus providers like norton and mcafee when blacklisted a website s visitors are redirected to a warning that the site they re about to visit might be dangerous in many cases being blacklisted causes a sharp drop in traffic to the site depriving the site owner of advertising or e commerce revenue damaging the site s brand and spurring additional support costs dasient identifies and contains malware that can infect site visitors today dasient is announcing the following updates to its patent pending web anti malware service which has been in alpha testing with thousands of websites since early this year free blacklist monitoring regularly monitors blacklists from search engines browsers and desktop anti virus companies and provides customers with instant alerts if they ve been flagged by those providers the wam blacklist monitoring service is now in public beta and is available for free to direct customers and web hosting providers premium monitoring and diagnosis continuously monitors customer websites for malicious code that can be distributed by web applications user generated content third party widgets advertisements and other vulnerable site elements when an infection is identified customers are notified and provided with detailed diagnostic information including all malicious source code and infected urls the wam premium monitoring service is now in public beta and is available on a subscription basis to direct customers and web hosting providers quarantining used in conjunction with the premium monitoring service dasient s quarantining technology automatically contains infections as soon as they re diagnosed serving the webpages in question but not the malicious code quarantining prevents the site from spreading malware broadly to its visitors and keeps it from being flagged by blacklist providers the wam quarantining service is now in private beta and direct customers and web hosting providers can sign up to join the beta on the dasient site the dasient wam monitoring and diagnostic services are built on a set of behavioral analysis technologies that continually crawl customer sites and the web identifying new web based malware infections the monitoring and diagnostic tools are provided to customers as a web service and the quarantining technology is made available as a web server module that can be installed by customers or web hosting providers more information about the dasient wam service and pricing can be found at www dasient com about dasient dasient is an internet security company that protects businesses from web based malware attacks it is the first to develop a complete web anti malware service that can monitor automatically identify and quarantine malware on websites before it can infect visitors and cause a loss of traffic reputation and revenue dasient was founded by former google engineers neil daswani and shariq rizvi and former mckinsey strategy consultant ameet ranadive they are backed by a group of seed investors who also invested in verisign citrix twitter digg tumbleweed finjan and more more information about dasient can be found at www dasient com posted by neil daswani at 2 44 pm 1 comment tuesday june 2 2009 obama gets serious about cybersecurity late last week president obama laid out the white house cybersecurity policy after a 60 day clean slate review the principles he laid out in his policy including net neutrality the necessity to collaborate with the private sector the importance of protecting privacy and the need to invest in r d have a lot of merit and i am hopeful that the details that will be fleshed out in the coming months will support them i have also been glad to see that the president has committed billions of taxpayer dollars behind his principles my only remaining hope is that these dollars find their way to people and places that can actually help traditional defense contractors have done an amazing job of building systems that have helped us defend in the physical world that said the new york times has reported that cybersecurity is a fairly new area to such contractors universities along with many smaller private sector companies are where much of the technical expertise lies in addition in my past experience at google i learned that there is a big difference between simply having security expertise and incorporating that security expertise into large scale automated systems that can defend large parts of the internet at a time my hope indeed is that taxpayer cybersecurity dollars go toward building large scale automated defense systems that can defend large parts of the internet at a time employing large numbers of human hacker soldiers is not an approach that can work and scale up against automated attack systems that include million machine botnets and malware variant generators that produced more malware in 2007 than the world saw in the twenty years prior to that the nature of web security has changed and our defense strategies need to change with it at the very least our defenses need to work at web speed and web scale i am thrilled that the obama administration seems to be taking a more aggressive approach to cybersecurity than any previous administration and over the next few years i look forward to working together with businesses universities and now more than ever the government to help the internet continue to grow as a platform that enables us to safely communicate collaborate and conduct commerce sincerely neil daswani phd http www dasient com http www neildaswani com posted by neil daswani at 8 59 am no comments wednesday may 27 2009 web based malware attacks at an all time high over the past couple weeks there has been more web based malware activity than in any previous similar period this year the size of google malware blacklist which is used to mark sites with a this site may harm your computer annotation in their search results exceeded 200 000 sites for the first time last week reaching an all time high of 229 980 today this increase was due in part due to the rapid propagation of a drive by download virus named gumblar compromising legitimate sites to serve malware to unsuspecting users has long been regarded as an emerging trend but numbers like these make it clear that this attack vector is already a significant threat and as web applications become more and more sophisticated the attack surface for this vector will only increase in size existing solutions have so far not been able to keep pace with this fast moving threat and new solutions may be required neil http www neildaswani com posted by neil daswani at 12 01 pm 2 comments wednesday december 17 2008 time to mobilize it is interesting to note that in the current down economy physical crime rates are going up as one might expect there are also indications that cyber crime rates are following the same trend and have also been going up as per mcafee s 2008 virtual criminology report and a panda labs study that found a correlation between stock market drops and the continued rise of malware in addition the new york times reports that the bad guys are winning in large part to the spread of malware while the global markets have been contracting symantec estimates that cyber criminal economies are booming and the germans believe that cybercrime is likely to wreak as much havoc as the credit crisis in the coming years if international regulation is not improved so that s the bad news the good news is that the good guys are starting to mobilize for instance the fbi is reaching out beyond u s borders as the internet has no borders and is helping organize law enforcement academia and industry develop international solutions to the problem this coming january 6 9 the fbi together with fordam university have organized the first international conference on cyber security iccs 2009 in new york city in some of the conference sessions sandra stanar johnson a senior executive at the nsa will be talking about the us comprehensive national cyber security initiative and darren mott special agent with the fbi cyber division will be talking about the rise of eastern european organized cyber crime i will also be giving a talk on protecting your organization from cybercrime to tie up the conference so please feel free to register for the conference if it is something you might be interested in also stopbadware org a joint partnership between the berkman center for internet society and the oxford internet institue along with its industry partners google included has been doing a great job of working to raise awareness of the problem and build community to address the problem last but not least for those of you that were not already aware i have left my lofty post at google to help together with two stellar co founders i have started dasient a company that is helping businesses with revenue loss problems that can arise as a result of cyber criminal activity i can t say too much more than that right now as we are in stealth mode but you can undoubtedly expect that there will be more news to come sincerely neil daswani phd http www dasient com http www neildaswani com posted by neil daswani at 7 56 pm no comments tuesday november 11 2008 rampant malware drive by downloads hi folks drive by downloads are rampant they infect your machine with malware when you simply visit a website no clicking on links or user interaction is required you simply get infected when your browser loads the page following is a link to an article about such a sample attack from last month http www theregister co uk 2008 11 10 drive_by_download_mass_attack and the cybercrime economy is growing due to the economic downturn http arstechnica com news ars post 20081023 malware writers ratchet up attacks as stock market tanks html http www informationweek com news security cybercrime showarticle jhtml jsessionid y132jjqo0yumiqsndlrskh0cjunn2jvn articleid 212101494 cid tab_art_int google is doing some great work in this area by flagging web sites that get infected so that you are protected while you are searching by displaying a message saying this site may harm your computer below infected links in their search results google also provides the list of infected sites to firefox and chrome browsers so that users can be protected not only while they are searching but can be protected wherever they happen to be browsing on the internet yahoo provides similar protections through a feature called safesearch that they have deployed in partnership with mcafee finally microsoft is also slated to provide anti malware protection as part of the next version of internet explorer there is much good work that search engines and browsers are doing to help protect users detection systems are working to avoid false positives when a web site gets blacklisted even though they are not really infected potentially at the expense of false negatives in which a web site does not get blacklisted even though it is infected i hope that over time google yahoo and microsoft crack down even more aggressively on this problem so that unsuspecting users don t get infected and the growth of botnets resulting from such malware infections can be curtailed thoughts comments questions let s keep fighting the fight sincerely neil http www neildaswani com learn more about security from stanford s advanced computer security certificate program click on http tinyurl com 2286xw for more information my book foundations of security what every programmer needs to know is available at http tinyurl com 33xs6g posted by neil daswani at 7 03 am 1 comment sunday april 13 2008 crimeware it s out over the past few years one of the biggest shifts impacting security online has been that the attacks are no longer primarily conducted by teenagers writing viruses and worms to make a name for themselves but instead are executed by financially motivated cybercriminals a book entitled crimeware understanding new attacks and defenses by markus jakobsson and zulfikar ramzan to be officially released this week is the most comprehensive compilation to date that i am aware of cataloguing the many different ways that cybercriminals manipulate web sites software and people to make money online while the book is to be officially released on april 19 i was able to pick up a copy at the on site bookstore at the rsa conference last week a chapter co authored by yours truly and a distinguished team of googlers on online advertising fraud appears in the book along with chapters on topics such as crimeware in the browser dan boneh et al a taxonomy of coding errors gary mcgraw and technical defense techniques peter ferrie et al the chapters in the book provide deep dives into topics that not only describe the vulnerabilities that cyberattacks prey on but also provide a guide to high level defenses as such the book is a great read for cios and csos in addition to security researchers i highly encourage checking it out posted by neil daswani at 9 07 pm no comments older posts home subscribe to posts atom subscribe to neil s blog enter your email address become a follower of this blog mobile learn more about security disclaimer this is my personal blog the views expressed on these pages are mine alone and not those of my employer blog archive 2009 4 july 1 free stanford webinar 7 14 the spread of web ba june 2 may 1 2008 5 december 1 november 1 april 1 january 2 2007 8 de...