4 ms·
SimuLand, a lab environment to simulate attacker tradecraft
- jumelles 5y agoMicrosoft's announcement page: https://www.microsoft.com/security/blog/2021/05/20/simuland-understand-adversary-tradecraft-and-improve-detection-strategies/ https://www.microsoft.com/security/blog/2021/05/20/simuland-...
- dang 5y agoChanged to that from https://therecord.media/microsoft-releases-simuland-a-lab-environment-to-simulate-attacker-tradecraft/ https://therecord.media/microsoft-releases-simuland-a-lab-en.... Thanks!
- nexuist 5y agoNote that this means, like, cyber-attackers, not hand-to-hand physical or ranged combat. I mean, I expected it would be cyber-attackers, but I would eagerly have accepted the alternatives as well.
- leoc 5y agoIs the simulator here a VM-based network simulator comparable to GNS3 https://www.gns3.com/ https://www.gns3.com/ , or something quite different? Amusingly, the other SimuLand is also about fighting viruses: http://simuland.exeter.ac.uk/ http://simuland.exeter.ac.uk/ .
- barbazoo 5y ago> https://github.com/Azure/SimuLand https://github.com/Azure/SimuLand
- edrxty 5y agoCan I use this as an aquarium?
- tempodox 5y agoMore likely as a terrarium.
- amatecha 5y agoI wonder, is the name a subtle reference to the "LAND" attack? https://en.wikipedia.org/wiki/LAND https://en.wikipedia.org/wiki/LAND I assume it's not, but the coincidence is funny :)
- 29athrowaway 5y agoIt does not take a sophisticated tool to realize that Windows Defender is as effective as the lazy bouncer meme. https://www.youtube.com/watch?v=J2uhWTFvug8 https://www.youtube.com/watch?v=J2uhWTFvug8
- xyzzy123 5y agoIt's useless until it's not. Something like it is necessary on Windows. The naming is pretty off though. "Responder" would be a better name than "Defender". At a high level we all know that it's theoretically impossible to detect all unknown "malicious" software ahead of time, by inspection. Defender also necessarily acts as an "oracle", if you're writing malicious software you have the ability to keep trying different things until Defender doesn't complain about what you're doing. However, once some specific malicious software has been identified, a fleet-wide response is necessary and at that point "Defender" has some use.
- NicoJuicy 5y agoWindows Defender reduced the amount of virus on windows on it's own. The original anti-virus applications ( some of them, eg. Norton) would be considered as my malware, blocking files, CPU spikes, taking over your browser search experience. All that ugly shit is gone by Defender. Related HN thread: https://news.ycombinator.com/item?id=13079569 https://news.ycombinator.com/item?id=13079569