Windows & .NET Magazine
Home Recent Articles My Account
 
           Advanced Search
LOG ON
Driving the Enterprise Network NT 2000 XP 2003
Security
Email this Article    Printer-Friendly    Subscribe to Security RSS feed   

[January 29, 2001]  
Microsoft Suffers Another DoS Attack

Top 20 Viewed Articles
1 Windows XP SP2 to Ship in Early August, Microsoft Says
2 How can I uninstall the Microsoft Java Virtual Machine (JVM) from Windows XP?
3 The Memory-Optimization Hoax
4 What You Need to Know About Windows Update Services
5 6 Network Protocol Analyzers
More More Top Viewed Articles
 Related Topics
Security
 Events Central
Securing Your Exchange Environment Workshop
Microsoft Tech Ed 2004 Worldwide
Microsoft Tech Ed 2004 Worldwide
Microsoft Tech Ed 2004 Worldwide

Paul Thurrott
InstantDoc # 19770
Paul Thurrott's WinInfo
 

Late Friday, Microsoft confirmed that the company had suffered its second Denial of Service (DoS) attack in as many days, resulting in more downtime for its Web presence. The company reported that customers experienced delays accessing Microsoft's Web properties for two 15-minute periods earlier that day, but users I've spoken with say the downtime was worse than that. (Microsoft notes that the attacks--the first one, which occurred Thursday, was responsible for many hours of downtime--were similar.) 
  
"Microsoft accepts full responsibility for the inconvenience our customers have experienced during the past couple of days," the company said in a statement. "We regret the inconvenience this attack has caused. Microsoft took immediate action to deal with the attack and restore normal operations. All sites were up and running normally by 12:30 P.M. Pacific time [Friday]."
  
Concurring with security analysts who've complained that Microsoft's unsophisticated network design made it particularly vulnerable to such attacks, the company admitted that it had learned some painful lessons. "We've already taken steps to change the architecture of our network infrastructure to improve its reliability and availability," Microsoft noted. "We will continue to examine our infrastructure architecture and processes to further safeguard our network resources and provide a great experience for our customers." Microsoft enlisted the Federal Bureau of Investigation (FBI) to help ascertain who was responsible for the attacks and hired Internet content-delivery company Akamai Technology to ensure that such attacks won't succeed in the future. Akamai maintains a wide range of geographically separated DNS servers, which let Internet machines resolve host names, such as http://www.microsoft.com/, into numeric IP addresses. All of Microsoft's DNS servers are in the same location and thus can be easily attacked.
 
A permanent solution to the DoS problem and related attacks, however, is still years away. Speaking at the annual World Economic Forum in Switzerland last week, Microsoft executive Craig Mundie said that it might be a decade before the Internet can be rearchitected to protect sites from outages. "I personally believe it's going to take 5 to 10 years before changes in the Internet infrastructure [that will protect Web sites] permeate the Internet," Mundie said. Mundie, whom Microsoft describes as an "expert in Internet-scale platform architectures and infrastructure protection," said that his company "is an obvious target" for hackers.


Reader Comments

A little cognitive dissonance for breakfast:

"Concurring with security analysts who've complained that Microsoft's unsophisticated network design made it particularly vulnerable to such attacks...All of Microsoft's DNS servers are in the same location and thus can be easily attacked."

[Microsoft executive Craig] Mundie, whom Microsoft describes as an "expert in Internet-scale platform architectures and infrastructure protection,"

Dave Howard -January 31, 2001

Post a Comment
If you don't have a username & password, please register now. Forgot your username/password?
1 Username: (required):
4 Your Comments: (required):
2 Password: (required):
3
Rate this article (required):

 less useful more useful 
1
2
3
4
5
Sponsored Links
 • Free graphical utility for restoring deleted AD objects
 • Try Diskeeper® FREE—get optimum performance on PCs and servers!
 • CommVault – Free White Paper: The Infinite (Email) Inbox
 • Save 33% on HP Blade Bundles. Lower your TCO, expand as needed.
 • Try free IT course titles and enter to win a Dell PC worth $2400.
Featured Links
 • Get 2 free sample issues of Windows & .NET Magazine
 • Get 2 free sample issues of SQL Server Magazine!
 • Free Tips - Secure Your Windows and Exchange Environments
 • Sign Up For 2 New IT Pro Workshops On Security And Exchange
 • Register Now - Free HP Wireless & Mobility Roadshow 2004
  Our Other Websites:   CertTutor   |   Connected Home   |   JSI FAQ   |   IT Library/eBooks   |   SuperSite   |   Windows FAQ   |   WinInfo News

Home   |   Subscribe / Register   |   About Us   |   Contact Us / Customer Service   |   Affiliates / Licensing   |   Press Room   |   Media Kit   |  

Windows & .NET Magazine Network is a Division of Penton Media Inc.
Copyright © 2004 Penton Media, Inc., All rights reserved. Legal | Privacy Policy