[84670] in North American Network Operators' Group
Re: router worms and International Infrastructure
daemon@ATHENA.MIT.EDU (Scott Weeks)
Tue Sep 20 03:06:37 2005
From: "Scott Weeks" <surfer@mauigateway.com>
Reply-To: surfer@mauigateway.com
To: nanog@merit.edu
Date: Mon, 19 Sep 2005 20:57:03 -1000
Errors-To: owner-nanog@merit.edu
----- Original Message Follows -----
From: Gadi Evron <ge@linuxbox.org>
To: surfer@mauigateway.com
Cc: nanog@merit.edu
Subject: Re: router worms and International Infrastructure
Date: Tue, 20 Sep 2005 09:18:43 +0200
> > Subnetwork specific worms? I only want to take down as1
> > , as2 and as3, for example, rather than a large-scale
> > 'internet killer' outage.
>
> Almost a year ago we had a crisis in Israel where
> something caused ONLY Israeli ISP clients to stop being
> able to use their DSL connections, and on the SAME DAY.
>
> We believe it was a targeted worm.
>
> Who said this can't happen? It already did. The biggest
> impact was the help desks being DDoS'd.
Do you mean to imply that it was a router code worm or a
normal worm? A "Warhol Worm" in a logically localized area
(an AS or three) utilizing router exploitations would be
spectacularly fast.
scott
