OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ballowe, Charles (CBallowe_at_usg.com)
Date: Mon Feb 03 2003 - 16:04:51 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    The concept of diversity in computer systems is nothing new. There
    are plenty of papers on the subject available, one is at:

    http://www.cs.unm.edu/~immsec/publications/hotos-97.pdf

    > -----Original Message-----
    > From: Peter Huang [mailto:yinrongrogers.com]
    > Sent: Thursday, January 30, 2003 11:06 PM
    > To: bugtraqsecurityfocus.com
    > Subject: To diversify and survive: the application of
    > population biology
    > concept into computer
    >
    >
    >
    >
    > Abstract:
    >
    > On January 25, 2003, the SQL Slammer worm
    > (w2.SQLSlammer.worm), also known
    >
    > as Sapphire (F-Secure), w32.SQLexp.worm (Symantec), and Helkern
    >
    > (Kaspersky) fully exploited known vulnerabilities in
    > Microsoft SQL 2000
    >
    > servers and caused tremendous network jam around the world. In this
    >
    > article, the concept of population biology is proposed to
    > apply to the
    >
    > computer programming. The concept is to diversify the same software
    >
    > functionality with a population of executables to avoid being
    > eliminated
    >
    > or exploited by a virus or worm like SQL Slammer.
    >