Dantas de Medeiros, Teobaldo A.Motta Pires, Paulo S.2006-08-172006-08-172004-07Teobaldo A. Dantas de Medeiros; Paulo S. Motta Pires: LIV - The Linux Integrated Viruswall. In Flegel, U.; Meier, M. (Eds.): Proc. of the International GI Workshop on Detection of Intrusions and Malware & Vulnerability Assessment, number P-46 in Lecture Notes in Informatics, pp. 187-200, Dortmund, Germany, July 2004, Köllen Verlag; ISBN 3-88579-365-X.http://hdl.handle.net/2003/2279010.17877/DE290R-704This paper presents a system developed in Linux aiming the protection of local area networks containing Windows workstations against malicious agents. The developed solution, named LIV - Linux Integrated Viruswall, besides filtering SMTP, HTTP and FTP traffic destined to the protected network, is capable of detecting malicious agents propagation in the local area network using a technique that we call "sharing-trap". Compromised workstations are isolated from the network and their users are notified, stopping the malicious agent's spread. Results collected from a network protected by LIV, containing thousands of Windows workstations, are presented and discussed. This paper includes information about the recent incident caused by MyDoom worm.enGesellschaft für InformatikLecture Notes in Informatics;P-46Malware004conference contribution