WordNet

the art and science of preparing and dispensing drugs and medicines, (同)pharmaceutics

PrepTutorEJDIC

〈U〉薬学;調剤術 / =drugstore

Wikipedia preview

出典(authority):フリー百科事典『ウィキペディア（Wikipedia）』「2015/06/28 18:54:12」(JST)

wiki en

[Wiki en表示]

Pharming^[p] is a cyber attack intended to redirect a website's traffic to another, fake site. Pharming can be conducted either by changing the hosts file on a victim's computer or by exploitation of a vulnerability in DNS server software. DNS servers are computers responsible for resolving Internet names into their real IP addresses. Compromised DNS servers are sometimes referred to as "poisoned". Pharming requires unprotected access to target a computer, such as altering a customer's home computer, rather than a corporate business server.

The term "pharming" is a neologism based on the words "farming" and "phishing". Phishing is a type of social-engineering attack to obtain access credentials, such as user names and passwords. In recent years, both pharming and phishing have been used to gain information for online identity theft. Pharming has become of major concern to businesses hosting ecommerce and online banking websites. Sophisticated measures known as anti-pharming are required to protect against this serious threat. Antivirus software and spyware removal software cannot protect against pharming.

Pharming vulnerability at home

While malicious domain-name resolution can result from compromises in the large numbers of trusted nodes that participate in a name lookup, the most vulnerable points of compromise are near the leaves of the Internet. For instance, incorrect entries in a desktop computer's hosts file, which circumvents name lookup with its own local name to IP address mapping, is a popular target for malware. Once rewritten, a legitimate request for a sensitive website can direct the user to a fraudulent copy. Desktops are often better targets for pharming because they receive poorer administration than most Internet servers.

More worrisome than host-file attacks is the compromise of a local network router.^[1] Since most routers specify a trusted DNS to clients as they join the network, misinformation here will spoil lookups for the entire LAN. Unlike host-file rewrites, local-router compromise is difficult to detect. Routers can pass bad DNS information in two ways: malconfiguration of existing settings or wholesale rewrite of embedded software (aka firmware). Many routers allow the administrator to specify a particular, trusted DNS in place of the one suggested by an upstream node (e.g., the ISP). An attacker could specify a DNS server under his control instead of a legitimate one. All subsequent resolutions would go through the bad server. A scenario involving malicious JavaScript that changes the router's DNS server is called drive-by pharming and was demonstrated by Stamm, Ramzan and Jakobsson in a December 2006 technical report.^[2]

Alternatively, many routers have the ability to replace their firmware (i.e. the internal software that executes the device's more complex services). Like malware on desktop systems, a firmware replacement can be very difficult to detect. A stealthy implementation will appear to behave the same as the manufacturer's firmware; the administration page will look the same, settings will appear correct, etc. This approach, if well executed, could make it difficult for network administrators to discover the reconfiguration, if the device appears to be configured as the administrators intend but actually redirects DNS traffic in the background. Pharming is only one of many attacks that malicious firmware can mount; others include eavesdropping, active man in the middle attacks, and traffic logging. Like misconfiguration, the entire LAN is subject to these actions.

By themselves, these pharming approaches have only academic interest. However, the ubiquity of consumer grade wireless routers presents a massive vulnerability. Administrative access can be available wirelessly on most of these devices. Moreover, since these routers often work with their default settings, administrative passwords are commonly unchanged. Even when altered, many are guessed quickly through dictionary attacks, since most consumer grade routers don't introduce timing penalties for incorrect login attempts. Once administrative access is granted, all of the router's settings including the firmware itself may be altered. These attacks are difficult to trace because they occur outside the home or small office and outside the Internet.

Instances of pharming

In January 2005, the domain name for a large New York ISP, Panix, was hijacked to point to a website in Australia. No financial losses are known.

In January 2008, Symantec reported a drive-by pharming incident, directed against a Mexican bank, in which the DNS settings on a customer's home router were changed after receipt of an e-mail that appeared to be from a legitimate Spanish-language greeting-card company.^[3]

Controversy over the use of the term

The term "pharming" has been controversial within the field. At a conference organized by the Anti-Phishing Working Group, Phillip Hallam-Baker denounced the term as "a marketing neologism designed to convince banks to buy a new set of security services".

Scott Chasin, a former CTO of McAfee and founder of email security firm MX Logic, coined the term in 2005.^{[citation needed]}

References

[p] - ^The word "pharming" is pronounced as "farm-ing".

^ "Can You Trust a Wireless Router?". Indiana University Bloomington. February 24, 2006.
^ "Drive-By Pharming". Indiana University Bloomington. December 13, 2006.
^ Messmer, Ellen (January 22, 2008). "First case of "drive-by pharming" identified in the wild". Network World.

Sources

"Security: Phishing and Pharming". Windows IT Pro Magazine. June 22, 2005.
"How Can We Stop Phishing and Pharming Scams?". CSO Magazine. July 20, 2005. ^{[dead link]}

External links

BIND 9 DNS Cache Poisoning (DNS Pharming Attack) - Discovered by Amit Klein (Trusteer)^{[dead link]}
"The Pharming Guide" by Gunter Ollmann
ZD Net Article "Alarm over "Pharming" Attacks^{[dead link]}
Wired News: Pharming Out-Scams Phishing
Network World Article on New Anti-Pharming Technology
eWeek article on the Hushmail.com DNS pharming attack^{[dead link]}
After Phishing? Pharming!^{[dead link]}
Main Trusteer Wikipedia Page

UpToDate Contents

全文を閲覧するには購読必要です。 To read the full text you will need to subscribe.

1. 漢方薬および栄養補助食品の概要 overview of herbal medicine and dietary supplements

English Journal

Preparation and properties of a pH sensitive carrier based on three kinds of polymer blend to control the release of 5-amino salicylic acid.

Dong Y1, Zhou Z, Ding H, Zhang S.Author information 1Jiangsu Provincial Key Laboratory for Interventional Medical Devices, Huaiyin Institute of Technology , Huaian, Jiangsu Province , P.R. China .AbstractCONTEXT: High concentration of 5-amino salicylic acid (5-ASA) in the distal ileum and colon is necessary for the treatment of inflammatory bowel disease (IBD). The control of small molecules, drugs, released from a polymeric matrix remains a great challenge.
Pharmaceutical development and technology.Pharm Dev Technol.2014 Dec;19(8):960-7. doi: 10.3109/10837450.2013.846372.
CONTEXT: High concentration of 5-amino salicylic acid (5-ASA) in the distal ileum and colon is necessary for the treatment of inflammatory bowel disease (IBD). The control of small molecules, drugs, released from a polymeric matrix remains a great challenge.OBJECTIVE: To study the preparation and pr
PMID 24320757

Deposition of non-spherical particles in bifurcating airways.

Bunchatheeravate P1, Curtis JS.Author information 1Chemical Engineering Department, University of Florida , Gainesville, FL , USA.AbstractParticle morphology plays an important role in pulmonary drug delivery. Not only does particle shape affect how particles flow and deposit, the shape also influences the drug release rate from the particles. In this work, a semi-theoretical relationship is developed to describe deposition efficiency as a function of fluid and particle properties, incorporating the effect of particle shape. For the 10 different particle types studied (with aerodynamic diameters between 1 and 10 µm), three key deposition mechanisms are identified. All particles deposit through inertial impaction, and additionally deposit via sedimentation or diffusion, depending on the particle specific momentum.
Pharmaceutical development and technology.Pharm Dev Technol.2014 Dec;19(8):942-51. doi: 10.3109/10837450.2013.840848.
Particle morphology plays an important role in pulmonary drug delivery. Not only does particle shape affect how particles flow and deposit, the shape also influences the drug release rate from the particles. In this work, a semi-theoretical relationship is developed to describe deposition efficiency
PMID 24320756

Curcumin amorphous solid dispersions: the influence of intra and intermolecular bonding on physical stability.

Wegiel LA1, Zhao Y, Mauer LJ, Edgar KJ, Taylor LS.Author information 1Department of Industrial and Physical Pharmacy, College of Pharmacy, Purdue University , West Lafayette, IN , USA .AbstractWe have investigated the physical stability of amorphous curcumin dispersions and the role of curcumin-polymer intermolecular interactions in delaying crystallization. Curcumin is an interesting model compound as it forms both intra and intermolecular hydrogen bonds in the crystal. A structurally diverse set of amorphous dispersion polymers was investigated; poly(vinylpyrrolidone), Eudragit E100, carboxymethyl cellulose acetate butyrate, hydroxypropyl methyl cellulose (HPMC) and HPMC-acetate succinate. Mid-infrared spectroscopy was used to determine and quantify the extent of curcumin-polymer interactions. Physical stability under different environmental conditions was monitored by powder X-ray diffraction. Curcumin chemical stability was monitored by UV-Vis spectroscopy. Isolation of stable amorphous curcumin was difficult in the absence of polymers. Polymers proved to be effective curcumin crystallization inhibitors enabling the production of amorphous solid dispersions; however, the polymers showed very different abilities to inhibit crystallization during long-term storage. Curcumin intramolecular hydrogen bonding reduced the extent of its hydrogen bonding with polymers; hence most polymers were not highly effective crystallization inhibitors. Overall, polymers proved to be crystallization inhibitors, but inhibition was limited due to the intramolecular hydrogen bonding in curcumin, which leads to a decrease in the ability of the polymers to interact at a molecular level.
Pharmaceutical development and technology.Pharm Dev Technol.2014 Dec;19(8):976-86. doi: 10.3109/10837450.2013.846374. Epub 2013 Nov 6.
We have investigated the physical stability of amorphous curcumin dispersions and the role of curcumin-polymer intermolecular interactions in delaying crystallization. Curcumin is an interesting model compound as it forms both intra and intermolecular hydrogen bonds in the crystal. A structurally di
PMID 24192454