Profiling Malicious Sites

There is a great recording of a talk by Prof Ross Anderson entitled Searching for Evil. It is well worth the hour it takes to watch it. I particularly liked the models of successful attack and defense models, where he (and his researchers) were able to prove that 'clique' or 'terrorist cell' type defenses usually beat out 'ring' or 'replace the fallen' models. The debunking of much of the phishing take down claims was also nice to see in the public. I am getting particularly concerned about malware being spread through SPAM and FastFlux websites, and it seems the problem is getting worse.

Posted by Dominic White