Symantec CTO on Flash Attacks

scubacuda writes "Robert Clyde, CTO of Symantec, recently warned an audience at the United Nations that there's an increasing gap between the speed at which attacks are being launched and the industry's ability to respond. Most attacks on Web sites are classified as Class III threats because they tend to take several hours/days to execute. Recently, however, Class II "Warhol attacks"--such as the SQL Slammer worm that make themselves famous in 15 minutes--have emerged. Before long, Clyde predicts that groups of well-funded hackers working in concert will be able to launch Class I "Flash attacks." To combat this, Clyde says that patches would need to be developed more quickly and deployed continuously in an automated mode. Admins would need better ways of locking down networks so an attack on one router is automatically recognized by all routers on the network; throttling back the throughput of suspicious packets on the network in order to limit damage; automating tools for ensuring that all network clients are compliant with security policies; and creating Web services technologies that do not interfere with application performance."

Comments

Flash Attack?

[jpsowin]

I thought that already was happening every time I go to a site with flash banners. Flash Attack. Yes, that name fits quite nicely.

Re:Flash Attack?

[EinarH]

Rumors has it that some girls use some technique known as "flashing" to get others attention. But being a nerd I have not had the pleasure to experience such an attack yet.*

(*Well actually I have, but that don't fit into my slashdot-image and would not make this joke funny.)

Re:Flash Attack?

[Anonymous Coward]

would not make this joke funny.

You needn't worry, there's no risk of that.

Let me guess.....

[Alex]

and Symantec has just the product to sort all this out?

Alex

Fess up

[Anonymous Coward]

How many people expected this article to have some reference to a new security exploit using flash?

Re:Fess up

[thynk]

well, honestly - I need some more coffee I think.

The first time I read it was a "Flush Attack" - and I thought, no the iLoo was a joke.

The next time flash was used I read it as "Flesh" and was thinking that a flesh attack might not be so bad.

Last but not least, I saw thousands of angry flash cards marching and attacking a server.

Making more coffee now.

Re:Automated mode...

[Anonymous Coward]

You mean like Windows Update?

No, no, no. We're talking about something that helps to fix the problem.

Here Be Dragons

[Jah-Wren Ryel]

You would think just about anyone over the age of 15 who has some kind of affinity for technology would have seen at least one movie depicting the kinds of problems with Symantec's solution taken to its logical conclusion. For example:

"SKYNET became self-aware at 4:01 AM on August 4th, 1997 and at 4:12 it ordered a pre-emptive nuclear strike."

"Flash attacks" are a myth

[Ilan Volow]

It's nothing more than a smear campaign by Ming the Merciless designed to break up the alliance with the Hawkmen.

Jeez, you people shouldn't believe everything you read on an internet rumors site.

Well Funded Hackers

[Anonymous Coward]

Clyde predicts that groups of well-funded hackers working in concert will be able to launch Class I "Flash attacks."

Or if you're not so well-funded you achieve the same effect by linking a site on Slashdot.