Crisis and aftermath

ABSTRACT

Last November the Internet was infected with a worm program that eventually spread to thousands of machines, disrupting normal activities and Internet connectivity for many days. The following article examines just how this worm operated.

REFERENCES

• 1: Allman, E. Sendmait--An internetwork mail router. University of California, Berkeley, (issued with the BSD UNIX documentation), 1983.
• 2: Denning, P. The Internet worm. Amer. Sci. 77, 2 (Mar.-Apr. 1989}, 126-128.
• 3: Eichen, M.W., and Rochlis, J.A. With microscope and tweezers: An analysis of the Internet virus of November 1988. In Proceedings of the Symposium on Research in Security and Privacy (May 1989}. IEEE-CS, Oakland, Calif.
• 4: Grampp, F.T., and Morris, R.M. UNIX operating system security. AT&T Bell Laboratories Tech. J. 63, 8, part 2 (Oct. 1984}, 1649-1672.
• 5: Harrenstien, K. Name/Finger. RFC 742, SRI Network Information Center, Dec. 1977.
• 6: King, K.M. Overreaction to external attacks on computer systems could be more harmful than the viruses themselves. Chronicle of Higher Education (Nov. 23, 1988), A36.
• 7: Bryan Kocher, President's letter, Communications of the ACM, v.32 n.1, p.3-ff., Jan. 1989 [doi>10.1145/63238.315910]
• 8: Robert Morris , Ken Thompson, Password security: a case history, Communications of the ACM, v.22 n.11, p.594-597, Nov. 1979 [doi>10.1145/359168.359172]
• 9: Postel, J.B. Simple mail transfer protocol. RFC 821, SRI Network Information Center, Aug. 1982.
• 10: Proceedings of the virus post-mortem meeting. National Computer Security Center, Ft. George Meade, MD, Nov. 8, 1988.
• 11: Brian Reid, Lessons from the UNIX breakins at Stanford, ACM SIGSOFT Software Engineering Notes, v.11 n.5, p.29-35, Oct. 1986 [doi>10.1145/382298.382364]
• 12: Brian Reid, Viewpoint, Communications of the ACM, v.30 n.2, p.103-105, Feb. 1987 [doi>10.1145/12527.315716]
• 13: Ritchie, D.M. On the security of UNIX. In UNIX Supplementary Documents. AT&T, 1979.
• 14: Royko, M. Here's how to stop computer vandals. Chicago Tribune, (Nov. 6, 1988).
• 15: Seeley, D. A tour of the worm. In Proceedings of the 1989 Winter USENIX Conference. USENIX Association, San Diego, Calif., Feb. 1989.
• 16: Eugene H. Spafford, The internet worm program: an analysis, ACM SIGCOMM Computer Communication Review, v.19 n.1, p.17-57, Jan. 1989 [doi>10.1145/66093.66095]
• 17: Spafford, E.H. Some musings on ethics and computer breakins. In Proceedings of the Winter USENIX Conference. USENIX Association, San Diego, Calif., Feb. 1989.
• 18: Steiner, J., Neuman, C., and Schiller, J. Kerberos: An authentication service for open network systems. In Proceedings of the Winter USENIX Association Conference, Feb. 1988, pp. 191-202.
• 19: Uncle Sam's anti-virus corps. UNIX Today!. (Jan. 23, 1989), 1o.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.2 Social Issues
          Subjects: Abuse and crime involving computers**

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.m Miscellaneous
          Subjects: Security*
  K.7 THE COMPUTING PROFESSION
      K.7.m Miscellaneous
          Subjects: Ethics**

General Terms:
Design, Management, Performance, Security