mailing list archives
RE: Symantec detected Slammer worm "hours" before
From: "Terry Baranski" <terry () eurocompton net>
Date: Sun, 23 Feb 2003 15:37:47 -0500
Apologies if this is old news. It's from Thursday, but I didn't see it
Symantec comes clean.... Somewhat:
From: owner-nanog () merit edu [mailto:owner-nanog () merit edu] On Behalf Of
Sent: Thursday, February 13, 2003 12:00 PM
To: nanog () merit edu
Subject: Symantec detected Slammer worm "hours" before
Wow, Symantec is making an amazing claim. They were able to detect the
slammer worm "hours" before. Did anyone receive early alerts from
Symantec about the SQL slammer worm hours earlier? Academics have
estimated the worm spread world-wide, and reached its maximum scanning
rate in less than 10 minutes.
I assume Symantec has some data to back up their claim.
"For example, the DeepSight Threat Management System discovered the
Slammer worm hours before it began rapidly propagating. Symantec's
DeepSight Threat Management System then delivered timely alerts and
procedures, enabling administrators to protect against the attack
before their environment was compromised."
Re: Symantec detected Slammer worm "hours" before hostmaster (Feb 13)
- Re: Symantec detected Slammer worm "hours" before, (continued)
- RE: Symantec detected Slammer worm "hours" before Terry Baranski (Feb 23)