FBI Warns of More Cyberattacks
Site administrators urged to inspect logs for signs
Computerworld - Web site administrators are being advised by the FBI's cybercrime division to be especially vigilant in looking for evidence of distributed
In an advisory issued last week by the FBI's National Infrastructure Protection Center (NIPC), the agency said it has received information about "ongoing attempts to disrupt Web access to several sites."
The NIPC advisory came after a DDOS attack on the White House Web site on May 4. That attack lasted from about 8 to 11:15 a.m. EDT, causing so many automated requests for information that the servers were overloaded.
An NIPC spokeswoman declined to elaborate on the advisory.
Last week's notice followed an NIPC warning last month of an expected upswing in attacks by Chinese hackers against U.S. servers as a result of an increase in political tensions between the two countries.
The latest attacks cited by the NIPC have been seen on several networks, using data fragmented into large User Datagram Protocol (UDP) packets for transmission. The packets are directed at the commonly used Port 80.
The attackers are apparently using this method to try to bypass standard port protocol blocking techniques, according to the NIPC.
To detect such attacks, network administrators should inspect firewall logs and other records for evidence of fragmented UDP packets directed at Port 80. Such inbound packets indicate that a denial of service to the network may be under way. Outbound UDP packets indicate that there's a high likelihood that the network is already compromised by hacker DDOS software.
A special utility to detect DDOS software is available from the NIPC at www.nipc.gov/warnings/advisories/2000/00-055.htm.
Ric Steinberger, technology director at San Francisco-based AtomicTangerine Inc., formerly known as SecurityPortal.com, said such attacks have been common for years. Steinberger said he believes the NIPC issued this latest advisory in direct response to the DDOS attack on the White House Web site. "The NIPC needs to issue alerts when one or more federal Web sites have been attacked in this way," he said.
Most private business sites probably have Web servers equipped with firewalls that can help thwart these types of attacks, said Steinberger. Government sites, however, are usually more vulnerable because their staffs aren't as highly paid as their private-sector counterparts and don't have access to the most current software and hardware defenses, he said.
Read more about Networking in Computerworld's Networking Topic Center.
- Virtually Delivered High Performance 3D Graphics "A picture is worth a thousand words." That old phrase is as true today as it ever was. Pictures (i.e., those with heavy...
- Who does NSS Labs "Recommend" for NGFW? In 2012, NSS Labs found that most available NGFW solutions "fell short in performance and security effectiveness." In 2013 NSS Labs noted "marked...
- CIOs Deliver Productivity Breakthroughs with Intelligent Digital Signage Retailers have long recognized the influence that digital signage provides over a shopper's point-of-purchase decision making process.
- Improving Business Value of WAN Optimization Want to achieve faster ROI with WAN optimization? Read the latest IDC report and discover how you can cut IT costs without compromising...
- Live Webcast IBM FlashSystem V840: Leveraging Software-Defined Flash to Drive Your Business With end-to-end, tightly integrated functionality and super-fast flash technology, products like IBM FlashSystem V840 Enterprise Performance Solution empower businesses to leverage the efficiency...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- IBM FlashSystem V840: Leveraging Software-Defined Flash to Drive Your Business With end-to-end, tightly integrated functionality and super-fast flash technology, products like IBM FlashSystem V840 Enterprise Performance Solution empower businesses to leverage the efficiency... All Networking White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!