‘Red Herring’ vs Heartbleed

US cybersecurity researchers have developed a technique that fights the Heartbleed virus, and detects and entraps hackers who might be using it to steal sensitive data.

The Heartbleed bug, which became public last week, has set alarm bells ringing across the globe, including India, for fear of exposing millions of passwords, credit card numbers and other sensitive information to hackers.

Researchers at the University of Texas at Dallas created the sophisticated technique, dubbed ‘Red Herring’, which automates the process of creating decoy servers, making hackers believe they have gained access to confidential, secure information, when in fact their deeds are being monitored, analysed and traced back to the source.

“Our automated honeypot creates a fixed web server that looks and acts exactly like the original—but it’s a trap,” said Dr Kevin Hamlen, an associate professor of computer science in the Erik Jonsson School of Computer Science and Engineering, who led the team which created the technique.

“The attackers think they are winning, but Red Herring basically keeps them on the hook longer so the server owner can track them and their activities. This is a way to discover what these nefarious individuals are trying to do, instead of just blocking what they are doing,” said Hamlen, a member of the UT Dallas Cyber Security Research and Education Institute (CSI).

The Heartbleed bug affects about twothirds of websites previously believed to be secure. These are websites that use the computer code library called Open SSL to encrypt supposedly secure Internet connections that are used for sensitive purposes such as online banking and purchasing, sending and receiving e-mails, and remotely accessing work networks.