Ads by TechWords

See your link here
Receive the latest technology news and information.
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Cyberassaults hit Buy.com, eBay, CNN and Amazon

February 9, 2000 12:00 PM ET

The cyberassault that caused outages on Yahoo Inc.'s heavily trafficked Web portal Monday appears to have been just the start of a wave of denial-of-service attacks on large e-commerce and news sites.
Yesterday, Buy.com Inc. and eBay Inc. experienced shutdowns prompted by attacks similar to the one directed against Yahoo's California data center. The attack on Buy.com came within an hour of the online retailer's initial public stock offering and lasted about three hours. Both companies are clients of service provider Exodus Communications Inc. in Santa Clara, Calif., which reportedly issued a denial-of-service alert yesterday.
Other sites have also apparently been targeted. Internet monitoring firm Keynote Systems Inc. in San Mateo, Calif., reported yesterday that it observed a sharp drop in access speed and availability of a Web site run by Amazon.com Inc. and CNN.com, a unit of Time Warner Inc. Both sites appeared back to normal an hour later.
"On most sites, availability is 95 to 98%. What we have been seeing during these attacks are availability averages as low as 0% — in other words, it's next to impossible to get through," said a Keynote spokeswoman. Officials at both CNN and Amazon were not available for comment.
The spokeswoman for Keynote, which was among the first outside observers to detect the attacks, said the company had corresponded with a conference in San Jose yesterday sponsored by the North American Network Operators Group. She pointed out that the topic of the first session on the conference's agenda was denial-of-service attacks, and that session took place at the same time as the Yahoo attack.
Russ Cooper, editor of the popular security mailing list NTBugtraq, said the attackers are likely people trying to illustrate weaknesses in the Internet infrastructure. "They are attacking things that the media will notice. It is obviously an attempt to draw attention to some fact," Cooper said.
The attacks on Yahoo, eBay, Buy.com, CNN and Amazon have followed a pattern that suggests a denial-of-service attack. In each case, sites have been targeted with a massive volume of mock traffic that overwhelms servers and blocks routine traffic. Security analysts said the sheer amount of packet traffic in these attacks suggests a coordinated effort that uses many linked machines, which could have been hijacked by attackers from a remote location.
A spokeswoman for Yahoo, which was shut down for three hours Monday, said the source of the attack has been narrowed to 50 IP addresses. She said it was halted when filters were installed on routers that were able

Jump to comments

Additional Resources

Xerox
By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!
Microsoft
Save time and mitigate security risk. Deploy it now.
Sybase
In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Forrester Consulting - Optimizing Users and Applications in a Mobile World
Learn how to successfully deploy a WAN optimization solution that is specifically tuned for a mobile environment!  

Faster, Cheaper and Easier to Maintain
Can you afford not to upgrade your servers to today's advanced, energy-efficient technologies?  

Effectively Implementing Datacenter Automation
Effectively select and deploy the best datacenter automation solution today!

Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.

Mitigate Risk, Lower Costs and Improve Network Efficiency
Create a stable IP network that not only meets today's challenges, but is flexible enough to also meet future demands.