Valdis.Kletnieksvt.edu
Date: Tue Sep 25 2007 - 10:13:09 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, 25 Sep 2007 10:48:22 EDT, "J. Oquendo" said:

> Counterpoint... You're trying to shoot me down with 0day crap:
>
> You --> 0day attack --> My Infrastructure
>
> Me --> Botnet --> Your infrastructure
>
> Never having to consume any resources other than a point and click shoot
> em up attack, I necessarily won't even have to use my own resources. So
> shoot away as your network becomes saturated.

The point you're missing is that in an actual war, more than just infantry and
artillery shooting happens. Espionage happens, scouting happens, snipers
happen. And remember that your forward artillery observers are *always*
high-value targets for the opponent, so you want those to be stealthy.

Plus, there's blended attacks - how about using a 0day to drop botnet drones
onto the targeted network, so you DDoS it *from within* (quite interesting
if there's DDoS mitigation hardware on the external face of the network,
but none inside).

I'd fully expect that any cyber-warfare team worth the name would be attacking
with DDoS, 0days, social engineering, and every other tool they can think of.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFG+SWFcC3lWbTT17ARAuzCAJ9GfyrnBj5EbhfEe9obB3o3fUFt+wCfbmZf
dco1QwxwHAqOOMoztDPbCD0=
=Brs3
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]