Computer Systems Laboratory Colloquium

4:15PM, Wednesday, February 23, 2000
NEC Auditorium, Gates Computer Science Building B03

Perspectives on Distributed Denial of Service Attacks

David Brumley, Stanford University
Joel de la Garza, Securify Labs
Mark Seiden, Securify Labs
About the talk:

The SLIDES for the presentation are on-line.

"...still no news on who is behind the concerted DoS attacks that so crippled America's ability to buy Pokemon trading cards earlier this week." - "Need to Know", www.ntk.net

"In a case like this, there is no Interpol, no Pinkerton's, that you can turn to for help." - Wall Street Journal

"Who're you gonna call?" - Ghostbusters

Recent attacks on e-commerce sites have demonstrated the trust misplaced in today's Internet Protocols, and the codependence between the vast shopping mall that the Internet has become and government, law enforcement, and journalism.

We'll go in some detail into denial of service attacks: how they work, what happened in these cases, and how they can be prevented, detected and responded to.

Maybe we'll even show you some juicy chat sessions which took place among possible perpetrators of some of the attacks.

About the speakers:

David Brumley is the Assistant Computer Security Officer for Stanford University. He has responded to over 1000 incidents, authored such programs as the remote intrusion detector (RID) and SULinux (Stanford University Linux). David received his bachelor's degree in Mathematics from the University of Northern Colorado.

Joel de la Garza is a security consultant for Securify. He attended Stanford University where he began working for SUNsET, Stanford University's Network Security Team. He was a founding member of the Meeker Group, which worked to develop web applications for the medical device industry.

Mark Seiden is Director of Securify Labs and Practice Area Head for Physical Security (see www.securify.com). Programming since the '60s, consulting for 17 years in diverse areas of network engineering and security, clients have included major computer companies, investment banks and law firms, UN agencies, online content providers, ISPs, research projects and non-profits. A minor-league writer, he's been published in the New York Times, Wired, Sun Expert, Unix Review and (after being involved in a number of high profile activities, such as the pursuit and capture of Kevin Mitnick) was featured as one of the 50 CyberElite by Time Digital.

Contact information:

www.securify.com