This was in my mail this am. This is why there was an akamai dns issue. Curtis -- Curtis Maurand mailto:curtis@maurand.com http://www.maurand.com ---------- Forwarded message ---------- Date: Thu, 17 Jun 2004 00:49:42 -0400 From: David Kennedy CISSP <david.kennedy@acm.org> To: nanog@merit.edu Subject: Computerworld: Q&A: Tom Leighton, chief scientist at Akamai Q&A: Tom Leighton, chief scientist at Akamai He talked about the nature of yesterday's apparent DDoS attack News Story by Jaikumar Vijayan JUNE 16, 2004 (COMPUTERWORLD) - Akamai Technologies Inc. said today that the Domain Name System problems it encountered yesterday were the result of a sophisticated and targeted distributed denial-of-service attack against the company. In an interview with Computerworld, Tom Leighton, the company's chief scientist, talked about what happened. What was the nature of the yesterday's attack? It was a name server attack against four of our customers for whom we carry their name servers. Our assumption was this was an attack against Akamai and it was perpetrated by attacking our customer name service infrastructure. It is not impossible that this was a coordinated attack against those four Web sites. Akamai has a lot of key customers, and it could just be a coincidence that the four happened to be Akamai customers. [But] we are assuming it was an attack against Akamai. <snip> http://www.computerworld.com/securitytopics/security/story/0,10801,93875,00. html?SKC=security-93875
On Jun 17, 2004, at 5:52 AM, Curtis Maurand wrote:
This was in my mail this am. This is why there was an akamai dns issue.
Shouldn't someone like CAIDA be able to verify these claims? (They look at more than backscatter, right?) I feel like something of this magnitude could have been noticed. Is it possible that the attack was sophisticated enough that it was a DDoS that was "just" big enough to do the job but small enough to get lost in the ebb and flow of normal traffic? If so, that'd be quite a feat. I'm sure CAIDA or other groups are going over their datasets to see if there is anything anomalous. I'm looking forward to a third-party report. thanks, davidu ---------------------------------------------------- David A. Ulevitch - Founder, EveryDNS.Net http://david.ulevitch.com -- http://everydns.net ----------------------------------------------------
participants (2)
-
Curtis Maurand
-
David A.Ulevitch