The Blaster Worm: The View From 10,000 Feet

Jose Nazario, Arbor Networks, Ann Arbor, MI
Presented at NANOG 29, Chicago, 2003

A globally unused /8 network was monitored using a packet capture and analysis system to measure the introduction and spread of the Blaster worm. This worm was able to quickly affect over 250,000 systems in the one week period following its August 11, 2003, introduction onto the Internet.

Our data shows the breadth of the affected systems as well as the rate of the worm's spread. Overall, the global Internet community was able to respond and contain the worm's spread. Despite this reaction, several thousand Blaster hosts remain on the Internet.


Page 1 Page 2 Page 3 Page 4 Page 5 Page 6 Page 7 Page 8 Page 9 Page 10 Page 11 Page 12 Page 13 Page 14

Generated by MagicPoint