|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
[ISN] CAIDA analysis of code.red spread
From: InfoSec News (isn
c4i.org)
Date: Sun Jul 29 2001 - 04:52:37 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Forwarded by: Tom Perrine <tep
SDSC.EDU>
David Moore at CAIDA has posted a nice analysis of the spread of the
code.red worm. These are the same folks that brought you the
"backscatter" analysis of world-wide DOS attacks.
The infection rate was astounding, they have IP addresses for 375,000
infected hosts, which is a *lower* bound on the infection.
There are graphs that show the change in infection rate when CRv2 was
released, as well some amazing animations.
At one point the infection rate was at least 2000 hosts per minute.
http://www.caida.org/analysis/security/code-red/
You would do well to pull the animations from the mirror sites, or
grab the smaller formats, as opposed to the 13M Quicktime :-)
--
Tom E. Perrine (tep
SDSC.EDU) | San Diego Supercomputer Center
http://www.sdsc.edu/~tep/ | Voice: +1.858.534.5000
-
ISN is currently hosted by Attrition.org
To unsubscribe email majordomo
attrition.org with 'unsubscribe isn' in the BODY
of the mail.
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]