RPC/DCOM exploits detection and notification

Halim, Ayub (2005) RPC/DCOM exploits detection and notification. Faculty of Computer Systems & Software Engineering, Universiti Malaysia Pahang.

[img]
Preview
PDF
HALIM_BIN_AYUB.PDF

Download (831kB)

Abstract

Nowadays, the usages of the internet have grown rapidly. But internet also is exposed to any kind threat that can cause to many kind of damage. One (1) example of the internet threat is the network worm. The famous example of network worm is msblaster worm. Msblaster attack the Microsoft windows operating system especially Windows XP and Windows 2000. Msblaster used the vulnerabilities in RPC DCOM architecture to exploits to the operating system. The main problem of the Msblaster is it can craft the victim's IP addresses and try to exploits the computer with that IP addresses. This has made the network traffic become high and make the internet become unreachable in certain organization's network. Although the attack of Msblaster worm have decreased, but there is a potential of the worm to attack again in the future if the worm is not fully remove in the network. The purpose of this project is to detect the computer that have been infected by this worm and ask the user to remove the worm.The research and analysis of current type of attacks was done to get better understanding of the system. The SDLC methodology was used as the project development methodology. This project was developed using Microsoft Visual Basic 6.0 and using the design of client server model as the project architecture. As the result of the successful of this project, we can ensure that the worm is totally removed from our network.

Item Type: Undergraduates Project Papers
Uncontrolled Keywords: Computer programs Computer viruses Computer security VBScript (Computer program language)
Subjects: Q Science > QA Mathematics
Faculty/Division: Faculty of Computer System And Software Engineering
Depositing User: Shamsor Masra Othman
Date Deposited: 16 May 2013 04:24
Last Modified: 03 Mar 2015 08:02
URI: http://umpir.ump.edu.my/id/eprint/3582
Download Statistic: View Download Statistics

Actions (login required)

View Item View Item