[ISN] CAIDA analysis of code.red spread

From: InfoSec News (isnat_private)
Date: Sun Jul 29 2001 - 02:52:37 PDT

  • Next message: InfoSec News: "[ISN] Linux Advisory Watch - July 27th 2001"

    Forwarded by: Tom Perrine <tepat_private>
    David Moore at CAIDA has posted a nice analysis of the spread of the
    code.red worm.  These are the same folks that brought you the
    "backscatter" analysis of world-wide DOS attacks.
    The infection rate was astounding, they have IP addresses for 375,000
    infected hosts, which is a *lower* bound on the infection.
    There are graphs that show the change in infection rate when CRv2 was
    released, as well some amazing animations.
    At one point the infection rate was at least 2000 hosts per minute.
    You would do well to pull the animations from the mirror sites, or
    grab the smaller formats, as opposed to the 13M Quicktime :-)
    Tom E. Perrine (tepat_private) | San Diego Supercomputer Center 
    http://www.sdsc.edu/~tep/     | Voice: +1.858.534.5000
    ISN is currently hosted by Attrition.org
    To unsubscribe email majordomoat_private with 'unsubscribe isn' in the BODY
    of the mail.

    This archive was generated by hypermail 2b30 : Sun Jul 29 2001 - 07:39:45 PDT