Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Microsoft's "monkeys" find first zero-day exploit
Robert Lemos, SecurityFocus 2005-08-08

Microsoft 's experimental Honeymonkey project has found almost 750 Web pages that attempt to load malicious code onto visitors' computers and detected an attack using a vulnerability that had not been publicly disclosed, the software giant said in a paper released this month.

Comments Mode:
Microsoft's "monkeys" find first zero-day exploit ridicolous 2005-08-13
MSIE IV (1 replies)
Re: Microsoft's "monkeys" find first zero-day exploit ridicolous 2005-08-14
MonkeyMan (2 replies)
Re: Re: Microsoft's "monkeys" find first zero-day exploit ridicolous 2005-08-17
Anonymous
Yes, this is a very good approach. Having the source to the products does not mean the author knows all the flaws or where the next expliot thrust will occur. This project is in the spirit of the unix crashme program (http://people.delphiforums.com/gjc/crashme.html) which exposed many user-mode vectors for crashing unix systems; none of which should have existed...

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11273/32327#32327







 

Privacy Statement
Copyright 2007, SecurityFocus