JSOC INSIGHT vol.6 English Edition

"JSOC INSIGHT" is an analysis report on the trend of security incidents, such as unauthorized access and malware infection, in Japan, based on daily analysis results by our JSOC security analysts. Since this report analyzes the trends in attacks, based on the data of incidents which JSOC customers actually encountered, the report will help in understanding world trends as well as actual threats that Japanese users are facing.

JSOC INSIGHT vol.6 contains below topics.

• Attacks that exploit a code execution vulnerability in GNU Bash (Shellshock)
• Attacks that exploit a code execution vulnerability in HTTP File Server
• Trends in Heartbleed attacks

Contents

1. Introduction
2. Executive Summary
3. Trends of Severe Incident in JSOC
    3.1 Trends in severe incidents
    3.2 Analysis of severe incidents
4. Topics of This Volume
    4.1 Attacks that exploit a code execution vulnerability in GNU Bash (Shellshock)
    4.2 Attacks that exploit a vulnerability where an arbitrary code is executed in HTTP File Server
5. Conclusion