Learn about Internet Worm Attacks: the Devastation and the Victims

Published 04/19/2004

Thursday, April 22, 2004
6:30 P.M. - 8:00 P.M.

Join your colleagues at the next meeting of The San Diego Chapter of the Association for Computing Machinery (ACM), featuring David Moore of CAIDA at the UCSD Supercomputer Center. He'll discuss recent trends in Denial of Service (DoS) attacks, how they are detected, how they spread, and their implications.

Also, there will be light snacks and great door prizes ... please RSVP (see below) before it's too late!

We will meet at 6:30PM at Sun Microsystems in the UTC area: 9525 Towne Centre Drive in the Killer Whale Room on the second floor. Parking will be free. The meeting cost is $3 for reservations paid in advance via PayPal ( http://www.sdacm.org/Reserve_20040422.html ) or $5 at the door - free for chapter members.

Note that this location is *across the street* from our normal meeting room. Sun has requested that all attendees arrive no later than 6:50PM, as the lobby will not be manned after that time.

The meeting is open to the public. For more information, call (858) 452-8701 or visit http://www.sdacm.org.

(We are also pleased to acknowledge the generous support of Sun Microsystems, San Diego Technical Books, O'Reilly Books, and UCSD Extension.) Bring your colleagues and friends to this don't-miss event - we hope to see you there!

RSVP

Please reserve a seat using our new reservations and payment form at http://www.sdacm.org/Reserve_20040422.html - there is a discount for reserving and paying using this form.

If you cannot use the reservations form (it saves us a lot of work if you can), send us an email at mailto: info@sdacm.org or call (858) 452-8701.

Please RSVP by April 21.

Abstract
Network telescopes provide the unique ability to see large-scale globally-dispersed network security events, such as denial-of-service attacks and the spread of Internet worms. A network telescope is a portion of routed IP address space with little or no legitimate traffic. By monitoring unexpected traffic arriving at a telescope, we can determine remote victims of DoS or hosts infected by a worm. More than 100 distributed denial-of-service attacks are occurring on average every minute of every day. Highly infectious Internet worms have become prevalent: in August 2001, CodeRed infected 360,000 machines in 10 hours. In January 2003, Sapphire/SQL Slammer infected over 75,000 machines in ten minutes. This talk covers trends in DoS attacks and victims over the past 2 years, as well as the spread dynamics of the Code-Red, CodeRedII, SQL Slammer/Sapphire and Witty worms.Presenter Bio David Moore is a popular speaker and researcher with expertise in Internet measurement and network security. He is a principal investigator and assistant director of the Cooperative Association for Internet Data Analysis (CAIDA) at the San Diego Supercomputer Center at UCSD and also a computer science PhD candidate at the University of California, San Diego. His work with others on tracking denial-of-service attacks and Internet worm spread has appeared in Information Security Magazine, IEEE Security & Privacy Magazine and Scientific American and, of course, slashdot. His presentations include invited talks at Usenix LISA, Usenix Security, NANOG (North American Operators Group), and others.

MEETING CHARGE: The meeting will cost $5 payable at the door or $3 payable via advanced reservation using our new reservations and payment form at http://www.sdacm.org/Reserve_20040422.html - chapter members get in free. (You can save approximately 50% by purchasing an annual SDACM Membership at the door for only $12 - or $10 using the reservations and payment form - see http://www.sdacm.org/mem.htm for more details.)

RSVP POLICY: We strongly encourage you to let us know if you plan to attend this meeting. We expect this meeting to be very well attended, and we may run out of space. In that case, attendees with RSVPs will be given admittance and seating preference. See http://www.sdacm.org/mem.htm#rsvp for more details.

LOCATION:
Sun Microsystems
9525 Towne Centre Drive
San Diego, CA 92121
NOTE THAT THIS IS ACROSS THE STREET FROM THE LOCATION OF THE LAST SEVERAL MEETINGS.

DIRECTIONS:
(From North or South I-805)
Exit West onto La Jolla Village Drive.
Turn RIGHT (North) onto Towne Centre Drive.
Proceed straight through the next two stoplights.
Turn RIGHT (East) into either the first or second driveway.
The building is the far building.
This is the building labelled Sun SAN09.
Free parking anywhere.

We will be in the "Killer Whale" Conference Room on the second floor.
As it is after hours, the lobby will be locked. The lobby will be manned by Sun employees who will let you in and escort you to the meeting room. After 6:50pm the lobby will not be manned, so there will be no way for you to gain access to the meeting.

A map to the location: http://tinyurl.com/linm