infectionvectors.com news

March 2008

After a winter filled with researching weaponization of web and email-based technologies, we are looking forward to public presentation of a few items, starting with a (much anticipated) trip to Myrtle Beach, South Carolina (US) in April for the Computer Security Conference 2008. Gordon is heading down for conference and workshop, hopefully the weather matches his expectations of a beach trip. We'll post a link to the paper (and a slide deck) in the coming weeks.

November 2007

Based on the generosity of Richard Bejtlich who ran an essay contest over at the superb TaoSecurity blog, I got a pass to the CSI2007 conference in Washington, DC. Looking forward to attending and seeing more of DC. 

July 2007

With the release of the Apple iPhone came the release of iPhone-based scams. infectionvectors.com reported on the first of these schemes in the "iPhony: Pop Scamming in 2007" and how they relate to malware professionalism as a whole.

March 2007

The latest vector space reports are on two topics that have taken over a year to flesh out. infectionvectors.com patrons are sure to be interested in the release of a new postcard scam paper as well as the long-awaited JP Morgan Chase-based phishing report. The latter is the first that we know of to follow a single line of phish for a full year as well as point to the possibility of offensive strikes against the fraudulent sites that collect personal data. 

October 2006

The infectionvectors.com team has a number of DIACAP-related items for both C&A types inside the US DoD and those interested in general process improvement. The research will certainly suit not only those looking for on-point discussions of the new policies but also decision makers at all levels. 

July 2006

fired up

infectionvectors.com writer Jason Gordon will be presenting our "Sharing the Unverifiable" research at SANSFIRE '06 in Washington, DC. The papers are available on this website - if you are going for the excellent training provided by the SANS Institute, take a moment to stop by his talk on July 9th. 

April 2006

Spring Break 

We're looking for reader contributions while we work on projects for the summer. There will be a slight layoff in articles as we complete personal projects and take some time off.

March 2006

inclusion

infectionvectors.com papers have now been spotted in wide distribution on ZDNet UK - if you are a registered user, show some support by downloading the spyware paper.

http://whitepapers.zdnet.co.uk/0,39025944,39112712c,00.htm

December 2005

repository

There are lots of great malware reports archived at the Megasecurity.org site, including a few from infectionvectors.com - although we would prefer everyone get the reports directly from us, it is always nice to be included in what others think is relevant to Internet security: http://www.megasecurity.org/papers/index.html. 

April 2005

beagle press

It is quite an honor to be recognized in a major forum like TechWeb/CRN. Gregg Keizer completed an article about writer Jason Gordon and the Beagle Lessons reports that has circulated through a number of outlets. Check it out here:

http://www.techweb.com/wire/security/161601776

&

http://www.crn.com/sections/breakingnews/dailyarchives.jhtml?articleId=161601815.

April 2005

the blogs

F-Secure posted this nice note about the Beagle worm papers:

http://www.f-secure.com/weblog/archives/archive-042005.html#00000545

and Wormblog added this post:

http://www.wormblog.com/2005/04/in_depth_bagle_.html 

Both are greatly appreciated, especially as we read each of these great blogs everyday. 

October 2004

lessons 2

Another external publication of an infectionvectors.com writer, this time at Securityfocus.com:

http://www.securityfocus.com/infocus/1803.