NANOG Meeting Presentation Abstract

Analysis of the DDoS Attack Against SCO
Meeting:	NANOG30
Date / Time:	2004-02-10 2:50pm - 3:10pm
Room:	Symphony Ballroom II - IV
Presenters:	Speakers: Colleen Shannon, CAIDA. David Moore, CAIDA.
Abstract:	We present our analysis of the December 2003 Distributed Denial-of-Service (DDoS) attack against the SCO group. In spite of rumors that SCO faked the denial-of-service attack to implicate Linux users and garner sympathy from its critics, UCSD\'s Network Telescope received more than 2.8 million response packets from SCO servers, indicating that SCO responded to more than 700 million attack packets over 32 hours. The outage was also documented by Netcraft and others. We present the details of this specific analysis as well as the principles and techniques behind UCSD\'s network telescope observatory station.
Files:	Analysis of the DDoS Attack Against SCO David Moore Presentation(PDF)
Sponsors:	None.

Back to NANOG30 agenda.

NANOG30 Abstracts

• Show All

• A Distributed Control Plane Architecture to Support Millisecond Routing Convergence
  Speakers:
  Hormuzd Khosravi, Intel; Kunihiro IshiguroIP Infusion; .
  

• A Distributed Control Plane Architecture to Support Millisecond Routing Convergence
  Speakers:
  Hormuzd Khosravi, Intel; Kunihiro IshiguroIP Infusion; .
  

• Customer-Triggered Real-Time Blackholes
  Speakers:
  Chris MorrowUUNET; .
  Tim BattlesAT&T; .
  Danny McPhersonArbor Networks; .
  

• Customer-Triggered Real-Time Blackholes
  Speakers:
  Chris MorrowUUNET; .
  Tim BattlesAT&T; .
  Danny McPhersonArbor Networks; .
  

• Customer-Triggered Real-Time Blackholes
  Speakers:
  Chris MorrowUUNET; .
  Tim BattlesAT&T; .
  Danny McPhersonArbor Networks; .
  

• MPLS-Based Layer 2 VPNs
  Speakers:
  Florin Balus, Nortel; Mike Loomis, Nortel;

• MPLS-Based Layer 2 VPNs
  Speakers:
  Florin Balus, Nortel; Mike Loomis, Nortel;

• BGP/MPLS Layer 3 VPNs
  Speakers:
  Ina MineiJuniper; .
  

• MPLS Fast Reroute
  Speakers:
  Joe SoricelliJuniper; .
  

• Anniversary Retrospective Introduction: Two Decades of the Internet
  Moderators:
  Sue Hares, NextHop; Panelists:
  Paul Francis, Cornell University; Steve BellovinAT&T Research; .
  Dino Farinacci, Procket;

• Anniversary Retrospective Introduction: Two Decades of the Internet
  Moderators:
  Sue Hares, NextHop; Panelists:
  Paul Francis, Cornell University; Steve BellovinAT&T Research; .
  Dino Farinacci, Procket;

• Anniversary Retrospective Introduction: Two Decades of the Internet
  Moderators:
  Sue Hares, NextHop; Panelists:
  Paul Francis, Cornell University; Steve BellovinAT&T Research; .
  Dino Farinacci, Procket;

• Anniversary Retrospective Introduction: Two Decades of the Internet
  Moderators:
  Sue Hares, NextHop; Panelists:
  Paul Francis, Cornell University; Steve BellovinAT&T Research; .
  Dino Farinacci, Procket;

• A Short History of the Internet
  Speakers:
  Scott Bradner, Harvard University;

• End-to-end, Spam, and DoS: Threats to the Model That Made the Internet Great
  Speakers:
  Phil Karn, QUALCOMM;

• 10 Years of Corporate Change in the NANOG & IP Backbone Community
  Moderators:
  Marti LevyNone; .
  Panelists:
  John CurranXO Communications; .
  Doug HumphreyJoss Institute; .
  

• 10 Years of Corporate Change in the NANOG & IP Backbone Community
  Moderators:
  Marti LevyNone; .
  Panelists:
  John CurranXO Communications; .
  Doug HumphreyJoss Institute; .
  

• 10 Years of Corporate Change in the NANOG & IP Backbone Community
  Moderators:
  Marti LevyNone; .
  Panelists:
  John CurranXO Communications; .
  Doug HumphreyJoss Institute; .
  

• Decade of Technology Pitfalls and Successes
  Speakers:
  Dino Farinacci, Procket;

• Research Forum: NETCONF Protocol Update
  Speakers:
  Eliot Lear, Cisco Systems;

• Research Forum: Synchronising Software Clocks on the Internet
  Speakers:
  Darryl Veitch, Sprintlabs;

• Research Forum: Achievable Comprehensive Delay Reporting from Routers
  Speakers:
  Darryl Veitch, Sprintlabs;

• Research Forum: Nemecis - A Tool to Analyze the IRR Registries
  Speakers:
  Georgos SiganosUC Riverside; .
  

• Research Forum: In-Progress Research Designing Support for Troubleshooting Complex Network Problems
  Speakers:
  Barbara Mirel, Univ. of Michigan;

• ISP Security and NSP-SEC BOF VI
  Moderators:
  Barry Raveendran GreeneCisco Systems; .
  Merike KaeoNone; .
  

• ISP Security and NSP-SEC BOF VI
  Moderators:
  Barry Raveendran GreeneCisco Systems; .
  Merike KaeoNone; .
  

• Peering BOF VII
  Moderators:
  Bill Norton, Equinix;

• How to Kill Worms and Viruses with Policy Pontifications
  Speakers:
  Scott Bradner, Harvard University;

• Listen and Whisper: Security Mechanisms for BGP
  Speakers:
  Lakshminarayanan Subramanian, UC Berkeley;

• Making Sense of BGP
  Speakers:
  Tina Wong, Packet Design; Van JacobsonPacket Design; .
  Cengiz AlaettinogluPacket Design; .
  

• Making Sense of BGP
  Speakers:
  Tina Wong, Packet Design; Van JacobsonPacket Design; .
  Cengiz AlaettinogluPacket Design; .
  

• Making Sense of BGP
  Speakers:
  Tina Wong, Packet Design; Van JacobsonPacket Design; .
  Cengiz AlaettinogluPacket Design; .
  

• Hot Potatoes Heat Up BGP Routing
  Speakers:
  Renata Teixeira, UCSD; Aman ShaikhAT&T; .
  Tim GriffinIntel; .
  Jennifer RexfordAT&T; .
  

• Hot Potatoes Heat Up BGP Routing
  Speakers:
  Renata Teixeira, UCSD; Aman ShaikhAT&T; .
  Tim GriffinIntel; .
  Jennifer RexfordAT&T; .
  

• Hot Potatoes Heat Up BGP Routing
  Speakers:
  Renata Teixeira, UCSD; Aman ShaikhAT&T; .
  Tim GriffinIntel; .
  Jennifer RexfordAT&T; .
  

• Hot Potatoes Heat Up BGP Routing
  Speakers:
  Renata Teixeira, UCSD; Aman ShaikhAT&T; .
  Tim GriffinIntel; .
  Jennifer RexfordAT&T; .
  

• MPLS Over Various IP Encapsulations
  Speakers:
  Mark Townsley, Cisco Systems;

• IAB Concerns About Permanent Deployment of Edge-Based Filtering
  Speakers:
  Itojun Hagino, IETF Internet Architecture Board;

• Regional Internet Registries Statistics and Activities
  Speakers:
  Ray Plzak, ARIN;

• Real-time Global Routing Metrics
  Speakers:
  Jim CowieRenesys Corporation; .
  Andy T. OgielskiRenesys Corporation; .
  B.J. PremoreRenesys Corporation; .
  Eric A. SmithRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Real-time Global Routing Metrics
  Speakers:
  Jim CowieRenesys Corporation; .
  Andy T. OgielskiRenesys Corporation; .
  B.J. PremoreRenesys Corporation; .
  Eric A. SmithRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Real-time Global Routing Metrics
  Speakers:
  Jim CowieRenesys Corporation; .
  Andy T. OgielskiRenesys Corporation; .
  B.J. PremoreRenesys Corporation; .
  Eric A. SmithRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Real-time Global Routing Metrics
  Speakers:
  Jim CowieRenesys Corporation; .
  Andy T. OgielskiRenesys Corporation; .
  B.J. PremoreRenesys Corporation; .
  Eric A. SmithRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Real-time Global Routing Metrics
  Speakers:
  Jim CowieRenesys Corporation; .
  Andy T. OgielskiRenesys Corporation; .
  B.J. PremoreRenesys Corporation; .
  Eric A. SmithRenesys Corporation; .
  Todd UnderwoodRenesys Corporation; .
  

• Root Cause Analysis of BGP Routing Dynamics
  Speakers:
  Matthew C. Caesar, UC Berkeley; L. SubramanianUC Berkeley; .
  R.H. KatzUC Berkeley; .
  

• Root Cause Analysis of BGP Routing Dynamics
  Speakers:
  Matthew C. Caesar, UC Berkeley; L. SubramanianUC Berkeley; .
  R.H. KatzUC Berkeley; .
  

• Root Cause Analysis of BGP Routing Dynamics
  Speakers:
  Matthew C. Caesar, UC Berkeley; L. SubramanianUC Berkeley; .
  R.H. KatzUC Berkeley; .
  

• Airborne Contagion: Effects of a Worm on Wireless Networking
  Speakers:
  Christopher Chin, UC Berkeley;

• Life on a University Network: An Architecture for Automatically Detecting, Isolating, and Cleaning Infected Hosts
  Speakers:
  Eric Gauthier, Boston University;

• Analysis of the DDoS Attack Against SCO
  Speakers:
  Colleen ShannonCAIDA; .
  David MooreCAIDA; .
  

• Analysis of the DDoS Attack Against SCO
  Speakers:
  Colleen ShannonCAIDA; .
  David MooreCAIDA; .
  

• BGP Testing: Why Be so Negative?
  Speakers:
  Brent Imhoff, Wiltel; Scott Poretsky, Quarry;

• BGP Testing: Why Be so Negative?
  Speakers:
  Brent Imhoff, Wiltel; Scott Poretsky, Quarry;