Security researchers use search engine to find malicious code on the Internet

[wizkid]

Security researchers use search engine to find malicious code on the Internet :


Google's search engine can find many things. Now security researchers are using Google to find malicious code.



HD Moore, the lead developer for the Metasploit Framework open source exploit project, created a tool and publicly posted code last week showing how to use Google to look for data strings within code defined as malicious. His tool includes a malware signature generator, a malware Google API signature search app, and a malware downloader.



Internet security firm Websense earlier this month described in general terms a toolset that uses the search engine's API to automate detection of malware and malicious code-infected sites. Dan Hubbard, Websense's senior director of security, says the company will share its search tools only with a select group of researchers. While security researchers routinely publicly disclose vulnerabilities they find, Hubbard said disclosing tools to find malicious code should be treated differently.



http://www.informationweek.com/showA...leID=191000057