Webinar: Detect and Address Worms and Malware like Conficker
November 2009 marked the first anniversary of the Conficker worm, a malware which spread quickly and at its peak is believed to have controlled millions of computers. One of the more interesting characteristics of Conficker is that it doesn’t rely on un-patched systems, but instead takes advantage of common weaknesses to spread thus making it much harder to detect and stop. The good news is that security researchers and practitioners have found new ways to detect Conficker by correlating activity across DNS, network ports, and external URL calls.
This webinar will present:
• Methods used by Unisys security experts to detect and stop Conficker using ArcSight SIEM
• Specific rules used as well as firing conditions that prevent false positives
• Practical techniques for securing your networks from the Conficker worm using a SIEM solution
After registration, we will send you a confirmation email with a link to this webinar.
Contact Information
* These fields are required.
Your information will remain private and will not be shared per the ArcSight privacy policy.
