Conclusions Cumulative effect of frequent small attacks hundres of small attacks per month for top targets cumulative effect of a very long lived attack Similar durations but larger packet and byte counts individual attacks have more sources What's going on? rapid increase in number of tools worms being ties to zombie creation - bot armies