Malicious Mobile Code

Larger Cover

Virus Protection for Windows

By Roger A. Grimes

Publisher: O'Reilly Media

Released: August 2001

Pages: 544

Malicious mobile code is a new term to describe all sorts of destructive programs: viruses, worms, Trojans, and rogue Internet content. Until fairly recently, experts worried mostly about computer viruses that spread only through executable files, not data files, and certainly not through email exchange. The Melissa virus and the Love Bug proved the experts wrong, attacking Windows computers when recipients did nothing more than open an email. Today, writing programs is easier than ever, and so is writing malicious code. The idea that someone could write malicious code and spread it to 60 million computers in a matter of hours is no longer a fantasy.

The good news is that there are effective ways to thwart Windows malicious code attacks, and author Roger Grimes maps them out inMalicious Mobile Code: Virus Protection for Windows. His opening chapter on the history of malicious code and the multi-million dollar anti-virus industry sets the stage for a comprehensive rundown on today's viruses and the nuts and bolts of protecting a system from them. He ranges through the best ways to configure Windows for maximum protection, what a DOS virus can and can't do, what today's biggest threats are, and other important and frequently surprising information. For example, how many people know that joining a chat discussion can turn one's entire computer system into an open book?

Malicious Mobile Code delivers the strategies, tips, and tricks to secure a system against attack. It covers:

The current state of the malicious code writing and cracker community
How malicious code works, what types there are, and what it can and cannot do
Common anti-virus defenses, including anti-virus software
How malicious code affects the various Windows operating systems, and how to recognize, remove, and prevent it
Macro viruses affecting MS Word, MS Excel, and VBScript
Java applets and ActiveX controls
Enterprise-wide malicious code protection
Hoaxes
The future of malicious mobile code and how to combat such code

These days, when it comes to protecting both home computers and company networks against malicious code, the stakes are higher than ever.Malicious Mobile Code is the essential guide for securing a system from catastrophic loss.

Chapter 1 Introduction
1. The Hunt
2. What Is Malicious Mobile Code?
3. Malicious Code and the Law
4. Malicious Code-Writing Subculture
5. MMC Terminology
6. Summary
Chapter 2 DOS Computer Viruses
1. Introduction
2. DOS Technologies
3. DOS Virus Technologies
4. Types of DOS Viruses
5. Virus Defense Mechanisms
6. Examples of DOS Viruses
7. Detecting a DOS-Based Computer Virus
8. Removing a DOS Virus
9. Protecting Yourself from Viruses
10. Risk Assessment -- Low
11. Summary
Chapter 3 Windows Technologies
1. Windows Technologies
2. New Windows Versions
3. Summary
Chapter 4 Viruses in a Windows World
1. DOS Viruses on Windows Platforms
2. Windows Viruses on Windows Platforms
3. Signs and Symptoms of Windows NT Virus Infections
4. Windows Virus Examples
5. Detecting a Windows Virus
6. Removing Viruses
7. Removing Infected Files
8. Preventing Viruses in Windows
9. Future
10. Risk Assessment -- Medium
11. Summary
Chapter 5 Macro Viruses
1. Microsoft Office Version Numbers
2. What Is a Macro Virus?
3. Microsoft Word and Excel Macros
4. Working with Macros
5. Office 2000 Security
6. Macro Virus Technologies
7. Macro Virus Examples
8. Detecting Macro Viruses
9. Removing Macro Viruses and Repairing the Damage
10. Preventing Macro Viruses
11. Risk Assessment -- High
12. Summary
Chapter 6 Trojans and Worms
1. The Threat
2. What Are Trojan Horses and Worms?
3. Signs and Symptoms
4. Types of Trojans
5. Trojan Technology
6. Becoming Familiar with Your PC
7. Trojan and Worm Examples
8. Detecting and Removing Trojansand Worms
9. Preventing Trojans and Worms
10. Risk Assessment -- High
11. Summary
Chapter 7 Instant Messaging Attacks
1. Introduction to Instant Messaging
2. Types of Instant Messaging
3. Introduction to Internet Relay Chat
4. Hacking Instant Messaging
5. Examples of IRC Attacks
6. Detecting Malicious IM
7. Removing Malicious IM
8. Protecting Yourself from IM Attacks
9. Risk Assessment -- Medium
10. Summary
Chapter 8 Internet Browser Technologies
1. Introduction
2. Browser Technologies
3. Web Languages
4. Other Browser Technologies
5. When to Worry About Browser Content
6. Summary
Chapter 9 Internet Browser Attacks
1. Browser-Based Exploits
2. Examples of Attacks and Exploits
3. Detecting Internet Browser Attacks
4. Removing and Repairing the Damage
5. Preventing Internet Browser Attacks
6. Risk Assessment -- Medium
7. Summary
Chapter 10 Malicious Java Applets
1. Java
2. Java Security
3. Java Exploits
4. Example Java Exploits
5. Detecting Malicious Java Applets
6. Removing Malicious Java Code
7. Protecting Yourself from Malicious Java Code
8. Risk Assessment -- Low
9. Summary
Chapter 11 Malicious ActiveX Controls
1. ActiveX
2. ActiveX Security
3. ActiveX Security Criticisms
4. Malicious ActiveX Examples
5. Detecting Malicious ActiveX Controls
6. Removing and Preventing Malicious Active Controls
7. Risk Assessment -- Medium
8. Summary
Chapter 12 Email Attacks
1. Introduction
2. Email Programs
3. Email Exploits
4. Detecting Email Attacks
5. Removing Infected Email
6. Preventing Email Attacks
7. Risk Assessment -- High
8. Summary
Chapter 13 Hoax Viruses
1. The Mother of All Computer Viruses
2. Categories of Hoax Messages
3. Detection
4. Removing and Preventing Hoax Viruses
5. Risk Assessment -- Low
6. Summary
Chapter 14 Defense
1. Defense Strategy
2. Malicious Mobile Code Defense Plan
3. Use a Good Antivirus Scanner
4. Antivirus Scanning Locations
5. The Best Steps Toward Securing Any Windows PC
6. Additional Defense Tools
7. Antivirus Product Review
8. Future
9. Summary
Chapter 15 The Future
1. The Future of Computing
2. MMC Exploits
3. Real Defense Solutions
4. Summary

Colophon

Title:

Malicious Mobile Code

By:

Roger A. Grimes

Publisher:

O'Reilly Media

Formats:

Print
Safari Books Online

Print:

August 2001

Pages:

544

Print ISBN:

978-1-56592-682-0

| ISBN 10:

1-56592-682-X

Colophon

Our look is the result of reader comments, our own experimentation, and feedback from distribution channels. Distinctive covers complement our distinctive approach to technical topics, breathing personality and life into potentially dry subjects. The image on the cover of Malicious Mobile Code is a Trojan horse. Over the years, the term "Trojan horse" has come to refer to outside infiltration in almost any form. The original Trojan horse, however, was actually a very large, hollow, wooden horse created by the Greek army as a supposed gift to the city of Troy during the Trojan War in the sixteenth century. The Greek army retreated from the city and left the horse outside the gate. The people of Troy thought it was either a gift from the gods or a peace offering from the Greeks, and so they wheeled the horse inside the city. That night, Greek soldiers emerged from the hollow structure and opened the gates to the rest of the army, who infiltrated the city while the Trojans slept, unaware of their impending fate. Nicole Arigo was the production editor, and Mark Nigara was the copyeditor for Malicious Mobile Code. Claire Cloutier, Darren Kelly, and Jane Ellin provided quality control. Edie Shapiro provided production assistance. Pamela Murray wrote the index.

Hanna Dyer designed the cover of this book, based on a series design by Edie Freedman. The cover image is an original illustration created by Lorrie LeJeune. Emma Colby produced the cover layout with QuarkXPress 4.1 using Adobe's ITC Garamond font.

David Futato designed the interior layout based on a series design by Nancy Priest. Neil Walls converted the files from Microsoft Word to FrameMaker 5.5.6 using tools created by Mike Sierra. The text and heading fonts are ITC Garamond Light and Garamond Book; the code font is Constant Willison. The illustrations that appear in the book were produced by Robert Romano and Jessamyn Read using Macromedia FreeHand 9 and Adobe Photoshop 6. This colophon was written by Nicole Arigo.

Description

Table of Contents

Product Details

Colophon

Recommended for You

Recently Viewed

Exchange Server Cookbook

For Exchange Server 2003 and Exchange 2000 Server

By Paul Robichaux, Missy Koslosky, Devin L. Ganger

June 2005

Ebook: $35.99

Print & Ebook: $49.45

Print: $44.95

Lingo in a Nutshell

By Bruce A. Epstein

November 1998

Print: $24.95

Windows XP for Starters: The Missing Manual

By David Pogue

November 2005

Ebook: $15.99

Print & Ebook: $21.95

Print: $19.95

Customer Reviews

REVIEW SNAPSHOT®

by PowerReviews

O'Reilly Media Malicious Mobile Code

4.0

(based on 4 reviews)

Reviews

Reviewed by 4 customers

Sort by

Displaying reviews 1-4

8/21/2003

(2 of 3 customers found this review helpful)

4.0

Malicious Mobile Code Review

By Kevin Steiner, Professor of Network Security, Capitol College.

from Undisclosed

Comments about O'Reilly Media Malicious Mobile Code:

If you need an indepth look at Malicious Code, this is THE book. This well-rounded, well thought-out reference should be in every Security Professional's Tool Kit. Almost everything is here in a "nutshell."

8/21/2003

(2 of 2 customers found this review helpful)

4.0

Malicious Mobile Code Review

By Kevin Steiner, Professor of Network Security, Capitol College.

from Undisclosed

Comments about O'Reilly Media Malicious Mobile Code:

2/25/2003

(1 of 2 customers found this review helpful)

4.0

Malicious Mobile Code Review

By Kenneth Wilcox

from Undisclosed

Comments about O'Reilly Media Malicious Mobile Code:

Need protection for your insecure operating systems? This is your contraceptive! It looks like a technical book, it weighs as much as a technical book, it reads like a technical book. It must be a technical book. This is not a book you can sit down and read cover-to-cover, it has taken me several tries to read it. BUT it IS very informative I have yet to pick this book up without learning something. It is as scarry as the next Stephen King or Dean Koontz novel.

9/13/2002

(0 of 1 customers found this review helpful)

4.0

Malicious Mobile Code Review

By Jason A. Powell, CISSP (Cincinnati, OH)

from Undisclosed

Comments about O'Reilly Media Malicious Mobile Code:

Malicious Mobile Code is very dry reading, but probably due more to the nature of the subject matter than any other factor. Although this book took almost twice as long to read in comparison to similarly voluminous O'Reilly books, it contained a wealth of knowlege, wisdom and common sense, even for this veteran security practitioner.

My only real gripe about this publication is the sheer volume of grammatical errors and typos; the second edition of this book should be much easier to read.

Overall, a very good book for IT professionals of all levels of experience, and it is written well enough to be of value for most savvy end-users, as well. It has earned a permanent place in my personal workplace library, and I expect that it will be referenced often.

Displaying reviews 1-4

Save a Tree - Go Digital what is this?

Print: $39.95

Safari Books Online - Read now >

Chapter 1 Introduction

The Hunt

What Is Malicious Mobile Code?

Malicious Code and the Law

Malicious Code-Writing Subculture

MMC Terminology

Summary

Chapter 2 DOS Computer Viruses

Introduction

DOS Technologies

DOS Virus Technologies

Types of DOS Viruses

Virus Defense Mechanisms

Examples of DOS Viruses

Detecting a DOS-Based Computer Virus

Removing a DOS Virus

Protecting Yourself from Viruses

Risk Assessment -- Low

Summary

Chapter 3 Windows Technologies

Windows Technologies

New Windows Versions

Summary

Chapter 4 Viruses in a Windows World

DOS Viruses on Windows Platforms

Windows Viruses on Windows Platforms

Signs and Symptoms of Windows NT Virus Infections

Windows Virus Examples

Detecting a Windows Virus

Removing Viruses

Removing Infected Files

Preventing Viruses in Windows

Future

Risk Assessment -- Medium

Summary

Chapter 5 Macro Viruses

Microsoft Office Version Numbers

What Is a Macro Virus?

Microsoft Word and Excel Macros

Working with Macros

Office 2000 Security

Macro Virus Technologies

Macro Virus Examples

Detecting Macro Viruses

Removing Macro Viruses and Repairing the Damage

Preventing Macro Viruses

Risk Assessment -- High

Summary

Chapter 6 Trojans and Worms

The Threat

What Are Trojan Horses and Worms?

Signs and Symptoms

Types of Trojans

Trojan Technology

Becoming Familiar with Your PC

Trojan and Worm Examples

Detecting and Removing Trojansand Worms

Preventing Trojans and Worms

Risk Assessment -- High

Summary

Chapter 7 Instant Messaging Attacks

Introduction to Instant Messaging

Types of Instant Messaging

Introduction to Internet Relay Chat

Hacking Instant Messaging

Examples of IRC Attacks

Detecting Malicious IM

Removing Malicious IM

Protecting Yourself from IM Attacks

Risk Assessment -- Medium

Summary

Chapter 8 Internet Browser Technologies

Introduction

Browser Technologies

Web Languages

Other Browser Technologies

When to Worry About Browser Content

Summary

Chapter 9 Internet Browser Attacks

Browser-Based Exploits