The Distributed DoS Attack
- Attack may not be noticed on "daemon" networks
- Attack may overwhelm victim site, making identification of
all "daemon" systems difficult
- Only takes several hundred systems (especially if Internet 2
sites) to knock a large network off the Internet
- Multiple attacking systems at multiple sites means a long
time to neutralize network and fully stop attack
(especially on weekends)
- Interesting note: UW/Stanford testing HDTV over
Internet2 was doing 40-400MBps at the time of UMN attack
(August 19). Didn't do fist "live demo" at 500-600Mbps until
September 9. (First major use of Internet2 was to DoS?).
[Next]
|
[Prev]
|
[Top]
Dave Dittrich <dittrich@cac.washington.edu>
Last modified: Mon Nov 1 22:12:00 PST 1999