Client to server authentication

Hi all,

I've only recently started working as a security analyst so please be
easy on me if this question is some what naive!

The majority of worms and attacks on servers seem to stem from
malicious packet crafting - in particular buffer overflow exploits.
Since these attacks are usually not from the client software, I am
curious as to why there does not exist a security product on the
market that blocks requests to a server that do not originate from the
respective client software. Such a product would for example only
allow requests from Outlook to be handled by the Exchange server,
dropping any requests that originate from a virus, worm or attacker on
the network. This product could come in the form of an agent that
sits on each desktop and server in the network, checking that the
software opening sockets is inline with the security policies outlined
by the business. Using encryption, the product could ensure that
untrusted machines are not able to mimic valid agents.

Does anyone have any thoughts on this matter?
Adam Blake

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • [NEWS] Abyss Web Server Directory Traversal and Administration Bugs
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Abyss Web Server is a free personal web server ... Keep-Alive Requests: ...
    (Securiteam)
  • IIS / NTFS Security Issues with hyperlink within e-mail
    ... I have an asp page on our Intranet server which is set ... of this is to ensure that requests to this page contain ... Intranet all works well for all users. ... Security" dialog is also displayed requesting the user ...
    (microsoft.public.inetserver.iis.security)
  • Re: Programming PHP offline
    ... security works before I install a server on his machine. ... you can configure it to listen for requests only on ...
    (comp.lang.php)
  • security-basics Digest of: get.123_145
    ... VPN to ASP a security risk? ... Re: Multiple IPSec tunnels? ... Subject: Security NT Server ... VPN to ASP a security risk? ...
    (Security-Basics)
  • << SBS News of the week - Sept 26 >>
    ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
    (microsoft.public.backoffice.smallbiz2000)