Owning Anti-Virus: Weaknesses In A Critical Security Component presented at Blackhat Europe 2005

by Neel Mehta,

Tags: Security Auditing

Summary : The hype to stop hackers is making AV software more popular now than ever because of the percieved protection AV software gives you against hackers. Even the average person is aware they want AV on their computer (see AOL, Netscape, and other ISP television ads). In addition, most large organizations deploy multiple AV solutions within different teirs of their network because of the percived protection AV software provides. What if: Instead of protecting ppl from hackers AV software was actually making it easier for hackers? Our talk will focus on auditing AV for security issues that may be abused, and present examples of those issues in popular AV products.