Real World Case Outlines How Botnets Brought Down Infrastructure of Central American Country and How McAfee IntruShield IPS Technology Eliminated the Threat
October 26, 2006 (Press Release) --
SANTA CLARA, Calif., Oct. 24 /PRNewswire-FirstCall/ McAfee, Inc. (NYSE: MFE) highlighted the serious threat botnets pose to corporations, government organizations, national infrastructure and homeland security in a case study today. The scope of this threat is underscored by recent events in Central America, where botnets repeatedly brought down the national infrastructure of a single country.
A bot is a software robot, also known as a zombie or drone, that allows an unauthorized user to remotely take control of a host computer without the victim's knowledge or permission. Infected computers can be used to launch distributed denial-of-service attacks, send spam and spyware, or commit cyber extortion. According to McAfee® Avert® Labs, more than 70 percent of spam e-mail is caused by botnets. The major problem with botnets occurs when they are used for attack purposes. For example, if several large botnet armies maliciously join together, they could threaten the national infrastructure of most countries.
A botnet of one million bots, with a conservative 128kbps broadband upload speed per infected bot, can wield a powerful 128 gigabits of traffic. This is enough to take most Fortune 500 companies offline using distributed denial-of- service attacks.
Botnet Attack Cripples Central American Country's Infrastructure
Earlier this year, a global telecommunications company with a business unit in Central America experienced several unusual problems including multiple network outages some lasting up to six hours - which disrupted businesses and national connectivity, and took automated teller machines offline for extended periods of time. A botnet-based distributed denial-of- service attack had crippled the country's infrastructure. In order to address the threat and bring the network back online, McAfee's award-winning IntruShield Network Intrusion Prevention System (IPS) appliances were deployed.
"Botnets can result in country-wide outages and disruptions," said Eric Winsborrow, vice president of product marketing at McAfee, Inc. "Fortunately, we were able to deploy a proactive network IPS solution to counter the flood of botnet attacks, which lead to an immediate resolution of symptoms and a subsequent 95 percent decrease in botnet traffic."
Intrusion prevention a preemptive approach to network security can identify, alert and block attacks against network infrastructure, systems and end-points in real-time. McAfee was the first in the industry to comprehensively address the threat of botnets by identifying them as a distinctive category of attack and proactively blocking their communication and installation. With this added layer of protection, McAfee IntruShield maximizes security by not only protecting against the exploit that installs the bots, but also by blocking the bot's communication or activation through the Internet. IntruShield can be deployed deep within the network cloud to identify botnet armies and proactively and accurately block the exploits that bots rely on to take over new machines.
Robert Rodriguez, who spent over 22 years as a special agent with the United States Secret Service, believes botnets are a serious threat to governments and enterprises.
"The recent growth of botnets poses perhaps the greatest security threat to individuals and nations," said Rodriguez, principal, Rodriguez & Associates LLP. "Botnets are a major threat and a powerful weapon of cyber-criminals. Proper procedures and policies, along with cooperation from law enforcement, will mitigate risk to the infrastructures of enterprises and governments."
Network intrusion prevention systems are a key component of an organization's network security and risk management strategy, and are advocated as best practice by leading experts, analysts, agencies and organizations. McAfee IntruShield is a critical element of McAfee's comprehensive security risk management strategy, combining with McAfee's Total Protection Solutions to mitigate threats and attacks, and to enforce policies for effective security risk management.
The case study, titled "Killing Botnets: A View from the Trenches" is available for download at www.mcafee.com/us/local_content/white_papers/wp_botnet.pdf. For more information on botnets, please visit the Avert Labs blog at http://www.avertlabs.com/research/blog/?cat=3
About McAfee, Inc.
McAfee, Inc., headquartered in Santa Clara, California and the global leader in intrusion prevention and security risk management, delivers proactive and proven solutions and services that secure systems and networks around the world. With its unmatched security expertise and commitment to innovation, McAfee empowers home users, businesses, the public sector, and service providers with the ability to block attacks, prevent disruptions, and continuously track and improve their security. www.mcafee.com.
NOTE: McAfee, Avert and IntruShield are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. © 2006 McAfee, Inc. All rights reserved.
A bot is a software robot, also known as a zombie or drone, that allows an unauthorized user to remotely take control of a host computer without the victim's knowledge or permission. Infected computers can be used to launch distributed denial-of-service attacks, send spam and spyware, or commit cyber extortion. According to McAfee® Avert® Labs, more than 70 percent of spam e-mail is caused by botnets. The major problem with botnets occurs when they are used for attack purposes. For example, if several large botnet armies maliciously join together, they could threaten the national infrastructure of most countries.
A botnet of one million bots, with a conservative 128kbps broadband upload speed per infected bot, can wield a powerful 128 gigabits of traffic. This is enough to take most Fortune 500 companies offline using distributed denial-of- service attacks.
Botnet Attack Cripples Central American Country's Infrastructure
Earlier this year, a global telecommunications company with a business unit in Central America experienced several unusual problems including multiple network outages some lasting up to six hours - which disrupted businesses and national connectivity, and took automated teller machines offline for extended periods of time. A botnet-based distributed denial-of- service attack had crippled the country's infrastructure. In order to address the threat and bring the network back online, McAfee's award-winning IntruShield Network Intrusion Prevention System (IPS) appliances were deployed.
"Botnets can result in country-wide outages and disruptions," said Eric Winsborrow, vice president of product marketing at McAfee, Inc. "Fortunately, we were able to deploy a proactive network IPS solution to counter the flood of botnet attacks, which lead to an immediate resolution of symptoms and a subsequent 95 percent decrease in botnet traffic."
Intrusion prevention a preemptive approach to network security can identify, alert and block attacks against network infrastructure, systems and end-points in real-time. McAfee was the first in the industry to comprehensively address the threat of botnets by identifying them as a distinctive category of attack and proactively blocking their communication and installation. With this added layer of protection, McAfee IntruShield maximizes security by not only protecting against the exploit that installs the bots, but also by blocking the bot's communication or activation through the Internet. IntruShield can be deployed deep within the network cloud to identify botnet armies and proactively and accurately block the exploits that bots rely on to take over new machines.
Robert Rodriguez, who spent over 22 years as a special agent with the United States Secret Service, believes botnets are a serious threat to governments and enterprises.
"The recent growth of botnets poses perhaps the greatest security threat to individuals and nations," said Rodriguez, principal, Rodriguez & Associates LLP. "Botnets are a major threat and a powerful weapon of cyber-criminals. Proper procedures and policies, along with cooperation from law enforcement, will mitigate risk to the infrastructures of enterprises and governments."
Network intrusion prevention systems are a key component of an organization's network security and risk management strategy, and are advocated as best practice by leading experts, analysts, agencies and organizations. McAfee IntruShield is a critical element of McAfee's comprehensive security risk management strategy, combining with McAfee's Total Protection Solutions to mitigate threats and attacks, and to enforce policies for effective security risk management.
The case study, titled "Killing Botnets: A View from the Trenches" is available for download at www.mcafee.com/us/local_content/white_papers/wp_botnet.pdf. For more information on botnets, please visit the Avert Labs blog at http://www.avertlabs.com/research/blog/?cat=3
About McAfee, Inc.
McAfee, Inc., headquartered in Santa Clara, California and the global leader in intrusion prevention and security risk management, delivers proactive and proven solutions and services that secure systems and networks around the world. With its unmatched security expertise and commitment to innovation, McAfee empowers home users, businesses, the public sector, and service providers with the ability to block attacks, prevent disruptions, and continuously track and improve their security. www.mcafee.com.
NOTE: McAfee, Avert and IntruShield are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. © 2006 McAfee, Inc. All rights reserved.
Email
Print
Download
SPAM
LEAVE A COMMENT
