I am sure that an attack of this nature or greater is not that distant into the future... It is not so much that the attackers are becoming more sophisticated... the attacks don't need to be sophisticated (its like anything, the more sophisticated it is, the more than likely it is that something will fail)... the reality is that there are more tools available on the web everyday.. an attacker can build a massive archive.. take their time to build an army of drones and then determine the best method for an attack. The underground has channels for passing zeroday attacks around without the whitehats knowing about them and these attacks help the attackers take everyone by surprise. The only true solution is education and training on network security. Administrators and users must be made aware of possible avenues for attacks, and they should learn how to best secure or become aware of how to secure their own systems. Companies that control the network channels of the world need to have systems in place that identify mass attacks taking place and do everything they can to trace places of origin as well as stopping the attack in its tracks. Attackers always have time on their side. They can research, research, research before performing an attack which gives them an advantage over the victim. Victims sit there unaware that they're going to be a target and also without the proper training to understand what has happened to them once the attack has started. I don't understand why companies that make cable modems don't build some type of security product into the device to help prevent attacks to cable users... that would be one step in the right direction as well as dial-up modems... or, network card manufacturers could even build some type of smarts into their hardware devices as well. Wait a minute... that might actually be considered a good idea... never mind... no one would ever do that.... besides... it would take a lot of business aware from the software companies that produce personal firewalls... and we can't have that, now can we...

Metzelplik

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/1413/16917#16917