loading...
A Failure to Learn from the Past
Las Vegas, Nevada December 08-December 12
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CSAC.2003.125432719th Annual Computer Security Applica ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Eugene H. Spafford, Purdue University CERIAS
On the evening of 2 November 1988, someone "infected" the Internet with a worm program. That program exploited flaws in utility programs in systems based on BSD-derived versions of UNIX. The flaws allowed the program to break into those machines and copy itself, thus infecting those systems. This program eventually spread to thousands of machines, and disrupted normal activities and Internet connectivity for many days. It was the first major network-wide attack on computer systems, and thus was a matter of considerable interest.
This paper provides a brief chronology of both the spread and eradication of the program, a presentation about how the program worked, and details of the aftermath. That is followed by discussion of some observations of what has happened in the years since that incident. The discussion supports the title of this paper - that the community has failed to learn from the past.
Citation:
Eugene H. Spafford, "A Failure to Learn from the Past," acsac, pp.217, 19th Annual Computer Security Applications Conference (ACSAC '03), 2003
Usage of this product signifies your acceptance of the Terms of Use.