blended threat

A blended threat typically includes:

• More than one means of propagation -- for example, distributing a hybrid virus/worm via e-mail that will self-replicate and also infect a Web server, so that contagion will spread through all visitors to a particular site;
• Exploitation of vulnerabilities, which may be preexisting or even caused by malware distributed as part of the attack;
• The intent to cause real harm (rather than just causing minor computer problems for victims), for example, by launching a denial of service (DOS) attack against a target, or delivering a Trojan horse that will be activated at some later date;
• Automation that enables increasing contagion without requiring user actions, such as opening attachments;

To guard against blended threats, experts urge network administrators to be vigilant about patch management, use and maintain good firewall products, employ server software to detect malware, and educate users about proper e-mail handling and online behavior.

Read more about blended threat: - A SearchSecurity.com white paper explains "Blended attacks exploits, vulnerabilities and buffer-overflow techniques in computer viruses." - Another SearchSecurity.com white paper looks at solutions: "The enterprise strikes back: Defending against blended threats." - The Network and Systems Professionals Association has provides a white paper about "The Blended Threat: Preventing Computer Security's New Nemesis."

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Microsoft Word zero-day being actively exploited Attackers are actively targeting a flaw in Microsoft Word, according to Symantec. New defenses for automated SQL injection attacks By automating SQL injection attacks, hackers have found a way to expedite the process of finding and exploiting vulnerable websites. The old defenses... Are there antivirus suites that pick up more than just run-of-the-mill viruses? There are some rare forms of malware that antivirus software doesn't pick up on, but there are some good tools to remove all sorts of malware.

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary bot worm  (SearchSecurity.com) A bot worm is a self-replicating malware program that resides in current memory, turns infected computers into zombies (or bots) and transmits itself... directory traversal  (SearchSecurity.com) Directory traversal is a form of HTTP exploit in which a hacker uses the software on a Web server to access data in a directory other than the...