| |||||||||||
On the value of virus notificationsOn the value of virus notificationsPosted Aug 28, 2003 7:35 UTC (Thu) by akukula (guest, #3862)In reply to: On the value of virus notifications by jamesh Parent article: On the value of virus notifications It's not that easy. A worm dosen't use single forged address (althought BigBoss used just one: big(at)boss.com) They either choose random adresses from a victim's address book, or create a brand new, like fed343fd(at)example.com, where the domain is also random. How do you imagine filtering them???
(Log in to post comments)
On the value of virus notifications Posted Aug 28, 2003 14:19 UTC (Thu) by dark (subscriber, #8483) [Link] Simple, you recognize which worm it is and you know what it does. That's how virus filters work, they have pattern with which to recognize specific worms.
|
|||||||||||