RE: INTRUDERS ARE HERE

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: David R. Kuykendall: "Introduction to IDS - David R. Kuykendall"
• Previous message: Mark HYDE @GEO: "Introduction"

Re your para 6 ... increase in automated attacks ...
A network management station one floor above the network administators
suddenly caused the wiring hubs of the LAN the network admin's use to be
severely overloaded with traffic, to the point that no-one could do
anything on the LAN.  It took 20 minutes to resolve the problem.  The next
hourly check of the firewall showed that a sophisticated automated attack
on the firewall took place at exactly the same time.  That was a damned
good diversion.  We are still trying to figure out precisely how it was
made to happen.

The same day there was a sharp increase in manual attacks on our firewall,
but just the usual knocking on doors and doorknob twisting.  They were
coming from access.com, which is an Internet service provider in
Philadelphia PA that has four Unix boxes on the Internet that provide
dial-up access over telephone lines.

                                           Hog Farmer

• Next message: David R. Kuykendall: "Introduction to IDS - David R. Kuykendall"
• Previous message: Mark HYDE @GEO: "Introduction"