The Spread of the Witty Worm
Thanks to Joel Scambray (coauthor of the Hacking Exposed series of books) for bringing this to my attention.
Not many people paid much attention to this worm, because it affected a non-Microsoft product, but the analysis is interesting nevertheless. What was really worrying (to me, anyway) is the one day (yes, ONE DAY! ) time delta from the vulnerability being publicly known (when ISS issued their patch, and eEye (https://www.eeye.com/html/Research/Advisories/AD20040318.html) issued their disclosure) to the worm's arrival. It was also the first real destructive worm.
CAIDA has a very nice write up on the worm.
Comments
- Anonymous
May 11, 2004
The comment has been removed - Anonymous
May 11, 2004
The fact that it affected "only" 12,000 hosts is interesting - and it is noted in the paper - it doesn't take millions of machines to support a worm. - Anonymous
May 29, 2009
PingBack from http://paidsurveyshub.info/story.php?title=michael-howard-s-web-log-the-spread-of-the-witty-worm