The Internet Worm Incident (1991)
Technical Report CSD-TR-933
Worldwide, over 60,000 computers in interconnecting networks communicate using a common set of protocols—the Internet Protocols (IP).[7, 15] On the evening of 2 November 1988 this network (the Internet) came under attack from within. Sometime after 5 PM EST, a program was executed on one or more of these hosts. That program collected host, network, and user information, then used that information to establish network connections and break into other machines using flaws present in those systems’ software. After breaking in, the program would replicate itself and the replica would attempt to infect other systems in the same manner. Although the program would only infect Sun Microsystems Sun 3 systems, and VAXÔ computers running variants of 4 BSD‡ UNIX,Ò the program spread quickly, as did the confusion and consternation of system administrators and users as they discovered that their systems had been invaded. Although UNIX has long been known to have some security weaknesses (cf. [22], [13, 21, 29]), especially in its usual mode of operation in open research environments, the scope of the break-ins nonetheless came as a great surprise to almost everyone. [via]
http://homes.cerias.purdue.edu/~spaf/tech-rep...

Related Files