Ads by TechWords

See your link here
Receive the latest technology news and information.
Networking
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

FBI Warns of More Cyberattacks

Site administrators urged to inspect logs for signs

May 14, 2001 12:00 PM ET

Computerworld - Web site administrators are being advised by the FBI's cybercrime division to be especially vigilant in looking for evidence of distributed

Service Denied
How DDOS attacks work:

Hackers overload targeted computer networks by smothering them with reams of data.

The overloads cause the networks to slow and eventually stop responding.
At present, there are no sure ways to halt DDOS attacks.
denial-of-service (DDOS) attacks that have recently hit Web sites.
In an advisory issued last week by the FBI's National Infrastructure Protection Center (NIPC), the agency said it has received information about "ongoing attempts to disrupt Web access to several sites."
The NIPC advisory came after a DDOS attack on the White House Web site on May 4. That attack lasted from about 8 to 11:15 a.m. EDT, causing so many automated requests for information that the servers were overloaded.
An NIPC spokeswoman declined to elaborate on the advisory.
Last week's notice followed an NIPC warning last month of an expected upswing in attacks by Chinese hackers against U.S. servers as a result of an increase in political tensions between the two countries.
The latest attacks cited by the NIPC have been seen on several networks, using data fragmented into large User Datagram Protocol (UDP) packets for transmission. The packets are directed at the commonly used Port 80.
The attackers are apparently using this method to try to bypass standard port protocol blocking techniques, according to the NIPC.
To detect such attacks, network administrators should inspect firewall logs and other records for evidence of fragmented UDP packets directed at Port 80. Such inbound packets indicate that a denial of service to the network may be under way. Outbound UDP packets indicate that there's a high likelihood that the network is already compromised by hacker DDOS software.
A special utility to detect DDOS software is available from the NIPC at www.nipc.gov/warnings/advisories/2000/00-055.htm.
Ric Steinberger, technology director at San Francisco-based AtomicTangerine Inc., formerly known as SecurityPortal.com, said such attacks have been common for years. Steinberger said he believes the NIPC issued this latest advisory in direct response to the DDOS attack on the White House Web site. "The NIPC needs to issue alerts when one or more federal Web sites have been attacked in this way," he said.
Most private business sites probably have Web servers equipped with firewalls that can help thwart these types of attacks, said Steinberger. Government sites, however, are usually more vulnerable because their staffs aren't as highly paid as their private-sector counterparts and don't have access to the most current software and hardware defenses,he said.


Jump to comments

Networking

Additional Resources

WHITE PAPER
Approximately 60 percent of data migration projects overrun time or budget, while some fail completely. Download this white paper, "Enhancing Your Chance for Successful Data Migration," to learn the critical steps you need to take to execute a data migration project with minimum cost and risk to your business.
WHITE PAPER
Read the Gartner research note to learn why the TCO of a server-based computing deployment used to deliver all applications to users is around 50% lower than that of an unmanaged desktop deployment.
WHITE PAPER
Economic downturns have a tendency to accelerate emerging technologies, boost the adoption of effective solutions, and punish solutions that are not cost competitive or that are out of synch with industry trends. This IDC White Paper presents the results of an IDC survey of 330 companies in Western Europe, Asia/Pacific and the Americas that measures the receptiveness to Linux and takes into consideration changing views driven by the disruptive economic environment that businesses face today.

White Papers & Webcasts

Southern Company
Download Now  

Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.

Mitigate Risk, Lower Costs and Improve Network Efficiency
Create a stable IP network that not only meets today's challenges, but is flexible enough to also meet future demands.

Share our Strength
Download Now  

Preparing Your Business Services for the Future
Would you trust your network monitoring tools enough to know when something is truly halting a business service?

IPAM: Slashing Network Costs
Slashing Network Costs by Consolidating and Automating Core Network Services

Horror stories: Managing IT Across Multiple Locations
How one extra sharp IT manager eliminates daily agony, hassle and repetition.