Re: Seeking details on KM

Gene Spafford (spaf@cs.purdue.edu)
Tue, 22 Nov 1994 13:03:28 -0500

> [...]
>
> And Peter Dennings Computers Under Attack;
> 
>    author    = {Peter J. Denning},
>    title     = {{Computers Under Attack: Intruders, Worms and
>        Viruses}},
>    year      = {1990},
>    editor    = {Peter J. Denning},
>    publisher = {ACM Press},
>    category  = {Security Viruses Worms},
>    note      = {ISBN 0-201-53067-8}
> 

I would also suggest looking at:

@Book{Hoffman90,
  title =		"Rogue Programs: Viruses, Worms, and Trojan Horses",
  publisher =		"Van Nostrand Reinhold",
  year =		1990,
  editor =		"Lance J.~Hoffman",
  address =		"New York, NY"

> The above books also deal in varying detail the Internet Worm
> incident;

as does Hoffman's book.

> 
> There are also many papers that can be obtained of the net in regards
> to the worm incident.
> 
> Gene Spafford's papers are an excellent analysis of the worm;
> 
>    author    = {Eugene H. Spafford},
>    title     = {{The Internet Worm: An Analysis}},
>    institution = {Purdue University},
>    year      = {1988},
>    month     = dec,
>    note      = {Technical Report CSD-TR-823}
> 
> and 
> 
>    title     = {{The Internet Worm Incident}},
>    institution = {Purdue University},
>    year      = {1991},
>    month     = sep,
>    note      = {Techinical Report CSD-TR-933}
> 
> as well as
> 
>    author    = {Donn Seeley},
>    title     = {{A Tour of the Worm}}
> 
> [all should be available on coast.cs.purdue.edu]

They are, plus others.  See
ftp://coast.cs.purdue.edu/pub/doc/morris_worm


> there are also 2 papers can also be obtained of the network
> 
>    author    = {Bill Cheswick},
>    title     = {{An Evening with Berferd: In Which a Cracker is Lured,
>        Endured and Studied}},
>    year      = {1992},
>    month     = jan,
>    howpublished = {Proceedings Winter USENIX Conference} and
> 
>    author    = {Steven Bellovin},
>    title     = {{There Be Dragons}},
>    booktitle = {Proceedings of the Third Usenix UNIX Security
>      Symposium},
>    year      = {1992},
>    month     = sep
> 
> should be able to obtain these from most good security archives, try
> ftp://coast.cs.purdue.edu (Gene might like to exact locations ?)

Look in ftp://coast.cs.purdue.edu/pub/doc/true_stories

> Finally a copy of Bruce Sterling's book;
> 
>    author    = {Bruce Sterling},
>    title     = {{The Hacker Crackdown}},
>    year      = {1992},
>    publisher = {Penguin Books}
> 
> It can also be obtained from the Project Gutenberg EText archives.
> ftp://mrcnext.cso.uiuc.edu/etext/etext94/hack11a.txt

This will soon be in ftp://coast.cs.purdue.edu/pub/doc/books+reviews

> If anyone has any further references please feel free to post them.

*ANY* documentation, reports, or software relating to security are
also appropriate for the COAST archive.  Please send a note to
security-archive telling us about things we don't already have, and
we'll be happy to add them to the archive.  See /pub/aux/CONTRIBUTIONS
for more details.

Note that everything in the archive should be listed in one of the
index files in /pub/aux, too.  That makes it easier to find.  Within a
week or two, we'll have the entire archive available via gopher, with
an Essence search capability, and full Jughead indexing.

--spaf