[54578] in North American Network Operators' Group
Re: Trends in network operator security
daemon@ATHENA.MIT.EDU (Sean Donelan)
Thu Jan 9 07:54:45 2003
Date: Thu, 9 Jan 2003 07:53:44 -0500 (EST)
From: Sean Donelan <sean@donelan.com>
To: nanog@merit.edu
In-Reply-To: <20030108214606.NAPR12483.mtiwmhc12.worldnet.att.net@mtiwebc15>
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 8 Jan 2003 todd.glassey@att.net wrote:
> Arent these more the attack trends of tier-3 providers and not network
> operators.
Maybe. I don't see too many tier-1 network operators attacking other
tier-1 network operators. The trend I continue to see affecting network
operators is customer security incidents, i.e. compromised end-user
applications.
> Seems to me that The the real issues is when the tier-2 and tier-1
> infrastructure come under attack. Otherwise these others are all at the
> applications layer - which so few on this list are interested in.
There are lots of interesting problems, but I don't know if 2003 is
the year. DOS is just too much fun.
Route hijacks/bogus origins
Compromised infrastructure
MLPS alteration
Authentication attacks
Physical intrusion