Google – China – Aurora attacks dissected.

http://www.theregister.co.uk/2010/03/01/aurora_resistence_futile/

Full paper here .  iSecPartner’s recommendations are good.  However, while comprehensive and technically accurate, I think it would be beneficial to have an accompanying set of “triage” recommendations (Use GPOs to disable LANMAN hashes; perform egress filtering and alerting; never EVER EVER login with admin credentials – use sudo or runas; migrate to token based authentication).

Advertisement

~ by stevegoldsby on March 2, 2010.

Posted in Uncategorized

Leave a Reply

Fill in your details below or click an icon to log in:

Gravatar
WordPress.com Logo

You are commenting using your WordPress.com account. ( Log Out / Change )

Twitter picture

You are commenting using your Twitter account. ( Log Out / Change )

Facebook photo

You are commenting using your Facebook account. ( Log Out / Change )

Cancel

Connecting to %s

 
Follow

Get every new post delivered to your Inbox.