RPC/DCOM exploits detection and notification

Nowadays, the usages of the internet have grown rapidly. But internet also is exposed to any kind threat that can cause to many kind of damage. One (1) example of the internet threat is the network worm. The famous example of network worm is msblaster worm. Msblaster attack the Microsoft windows ope...

Full description

Saved in:
Bibliographic Details
Main Author: Halim, Ayub
Format: Undergraduates Project Papers
Language:en
Published: 2005
Subjects:
Online Access:http://umpir.ump.edu.my/id/eprint/3582/1/HALIM_BIN_AYUB.PDF
http://umpir.ump.edu.my/id/eprint/3582/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1831521420508659712
author Halim, Ayub
author_facet Halim, Ayub
author_sort Halim, Ayub
building UMPSA Library
collection Institutional Repository
content_provider Universiti Malaysia Pahang Al-Sultan Abdullah
content_source UMPSA Institutional Repository
continent Asia
country Malaysia
description Nowadays, the usages of the internet have grown rapidly. But internet also is exposed to any kind threat that can cause to many kind of damage. One (1) example of the internet threat is the network worm. The famous example of network worm is msblaster worm. Msblaster attack the Microsoft windows operating system especially Windows XP and Windows 2000. Msblaster used the vulnerabilities in RPC DCOM architecture to exploits to the operating system. The main problem of the Msblaster is it can craft the victim's IP addresses and try to exploits the computer with that IP addresses. This has made the network traffic become high and make the internet become unreachable in certain organization's network. Although the attack of Msblaster worm have decreased, but there is a potential of the worm to attack again in the future if the worm is not fully remove in the network. The purpose of this project is to detect the computer that have been infected by this worm and ask the user to remove the worm.The research and analysis of current type of attacks was done to get better understanding of the system. The SDLC methodology was used as the project development methodology. This project was developed using Microsoft Visual Basic 6.0 and using the design of client server model as the project architecture. As the result of the successful of this project, we can ensure that the worm is totally removed from our network.
format Undergraduates Project Papers
id my.ump.umpir.3582
institution Universiti Malaysia Pahang
language en
publishDate 2005
record_format eprints
spelling my.ump.umpir.35822015-03-03T08:02:01Z http://umpir.ump.edu.my/id/eprint/3582/ RPC/DCOM exploits detection and notification Halim, Ayub QA Mathematics Nowadays, the usages of the internet have grown rapidly. But internet also is exposed to any kind threat that can cause to many kind of damage. One (1) example of the internet threat is the network worm. The famous example of network worm is msblaster worm. Msblaster attack the Microsoft windows operating system especially Windows XP and Windows 2000. Msblaster used the vulnerabilities in RPC DCOM architecture to exploits to the operating system. The main problem of the Msblaster is it can craft the victim's IP addresses and try to exploits the computer with that IP addresses. This has made the network traffic become high and make the internet become unreachable in certain organization's network. Although the attack of Msblaster worm have decreased, but there is a potential of the worm to attack again in the future if the worm is not fully remove in the network. The purpose of this project is to detect the computer that have been infected by this worm and ask the user to remove the worm.The research and analysis of current type of attacks was done to get better understanding of the system. The SDLC methodology was used as the project development methodology. This project was developed using Microsoft Visual Basic 6.0 and using the design of client server model as the project architecture. As the result of the successful of this project, we can ensure that the worm is totally removed from our network. 2005-11 Undergraduates Project Papers NonPeerReviewed application/pdf en http://umpir.ump.edu.my/id/eprint/3582/1/HALIM_BIN_AYUB.PDF Halim, Ayub (2005) RPC/DCOM exploits detection and notification. Faculty of Computer Systems & Software Engineering, Universiti Malaysia Pahang.
spellingShingle QA Mathematics
Halim, Ayub
RPC/DCOM exploits detection and notification
title RPC/DCOM exploits detection and notification
title_full RPC/DCOM exploits detection and notification
title_fullStr RPC/DCOM exploits detection and notification
title_full_unstemmed RPC/DCOM exploits detection and notification
title_short RPC/DCOM exploits detection and notification
title_sort rpc/dcom exploits detection and notification
topic QA Mathematics
url http://umpir.ump.edu.my/id/eprint/3582/1/HALIM_BIN_AYUB.PDF
http://umpir.ump.edu.my/id/eprint/3582/
url_provider http://umpir.ump.edu.my/