Centro de seguridad

The RSA Conferences are among of the most important annual security conferences. This year's US conference was held in San Francisco 1 - 5 March. One of the speakers was Microsoft's Scott Charney, Corporate Vice President Trustworthy Computing. His speech covered several interesting topics, of which we will discuss one: the ability, usefulness and implications of treating infected computers in a similar manner as infected human beings.

Microsoft has issued a security advisory about a new vulnerability in Internet Explorer. According to Microsoft this vulnerability could allow remote code execution, and it is being actively exploited in targeted attacks.

In its security bulletin summary for March 2010 Microsoft has published no updates for critical vulnerabilities in its operating systems / applications, however two important updates were published.

Code injection is a protection mechanism used by malware in order to avoid detection. The injector stores the malware as an encrypted resource, which it decrypts and injects into a running process. The injector may also contain various checks for virtual machines and system tools in order to hinder analysis.