Port Scans Don't Always Precede Network Hacks

The assumption that network port scans are a precursor to attempted hacks into computers may be flawed, according to research from the University of Maryland's A. James Clark School of Engineering.

An analysis of quantitative attack data gathered by the university over a two-month period shows that port scans precede attacks only about 5% of the time, said Michel Cukier, a professor in the Center for Risk and Reliability at the engineering school. The results of the research were released publicly last week.

In fact, more than half of all attacks aren't preceded by a scan of any kind, Cukier said. Port Scans Don't Always Precede Network Hacks - Computerworld

Linked by shanmuga Monday, 12th December 2005 11:43PM