Introduction to Cyber-Warfare

Chapter 8

Duqu, Flame, Gauss, the Next Generation of Cyber Exploitation

Outline

Introduction

Kernel Mode Rootkits

Vulnerabilities in the Operating System

Stolen Keying Material

Commonalities Between Stuxnet and Duqu

Information-Stealing Trojans

The Geography of Duqu

TDL3 and Other Malware

Object-Oriented Malware: Stuxnet, Duqu, Flame, and Gauss

Flame: King-Sized Malware

Gauss: Malware to Monitor Financial Transactions

Relationships Among Object-Oriented Malware

Summary

Suggested Further Reading

Information in This Chapter

• Kernel mode rootkits

• Vulnerabilities in the Operating System

• Stolen keying material

• Commonalities between Stuxnet and Duqu

• Information-stealing Trojans

• The geography of Duqu

• TDL3 and other malware

• Object-oriented ...