Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Applications
    • Applications
    • Cloud
    • Cybersecurity

    Symantec, Armorize Partner on Scanner That Detects Malware-Tainted Web Ads

    By
    Fahmida Y. Rashid
    -
    October 17, 2011
    Share
    Facebook
    Twitter
    Linkedin

      Symantec and Armorize Technologies have teamed up to launch a new cloud-based scanner to find and block malicious advertisements online.

      Symantec AdVantage will give publishers and site administrators the ability to inspect ads running on their Websites for hidden malware, Symantec and Armorize Technologies said Oct. 17. The service was announced at the Online Trust Alliance’s Online Trust Forum 2011 in Washington, D.C.

      Attackers are increasingly using malicious advertisements, also known as “malvertisements,” to distribute malware on Websites, Wayne Huang, co-founder and CEO of Armorize, told eWEEK. Huang noted that just because a site displayed malvertisements did not mean the site had been hacked. The Website owner may retain control of the site, but the criminal can still compromise users by taking advantage of online ads.

      “Malvertising poses a serious risk to online publishers and their customers, reputation and revenue,” said Fran Rosch, vice president of identity and authentication services at Symantec.

      For example, the London Stock Exchange Website was flagged by Google as being malicious in February when some of the ads on its third-party ad network turned out to be serving up malware. While the London Stock Exchange didn’t technically serve up malware, users attempting to visit the site were nonetheless hit by drive-by-download attacks.

      Malvertising attacks take three forms: cyber-attackers hack Websites and inject malware directly into banner ads; they compromise the ad network and infect the files being served up to customers; or they pose as legitimate advertisers and submit malicious ads.

      Instead of hacking a site to inject code, it is much easier to create a “fake identity for $10, $20” and submit an ad to the network that would be displayed on several sites at once, Huang said. Attackers can hit more users with a drive-by-download attack via an ad network much more efficiently than compromising a high-traffic Website, he said.

      Symantec AdVantage will scan, detect and report all instances of malvertising detected on a Web page. The scanner sees the site as a standard user and pulls the ad tags for its analysis. Since it is not an inline service, there is no impact on the network performance and nothing for the customer to do beyond providing the URL that the service will scan and protect, according to Matt Huang, co-founder and COO of Armorize, told eWEEK.

      Once malware is detected, the service automatically alerts the customer with information about the identity and location of the offending advertisement so that site administrators can remove it from the site. Publishers would be able to see statistics collected by the scanner and compare the quality of ads and the “safety” of the advertising networks with which they work.

      “Up until now, even the largest publishers do not possess insight into exactly what ads are presenting to their visitors,” Wayne Huang said.

      Symantec will provide the sales team and support staff, Geoff Noakes, director of business development at Symantec, told eWEEK. The AdVantage service will be powered by Armorize’s HackAlert malware-detection engine. Armorize Labs researchers used the engine to uncover recent malvertising campaigns that struck premier online networks such as Google Doubleclick and Yahoo Yield Manager.

      “You would think the larger ad exchanges would be more secure,” but ad networks have a hard time managing the large volume of ads, Matt Huang said.

      Many of the smaller ad platforms also are likely to have more vulnerabilities than some of the larger ones, making it lucrative to compromise the entire platform to hit a wide number of publishers at once, according to Wayne Huang.

      Symantec AdVantage will officially be available to publishers in mid-November. Symantec is currently accepting applications for a six-month long “market preview” in which customers have access to the full service for free. Pricing has not yet been determined, as the preview will help Symantec determine what kind of pricing scheme will work best for this kind of a service, Noakes said.

      Fahmida Y. Rashid
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×