Information Security: Code Red, Code Red II, and SirCam Attacks Highlight Need for Proactive Measures

reportActive / Technical Report | Accession Number: ADA394220 | Open PDF

Abstract:

Despite some similarities, each of the recent attacks is very different in its makeup, method of attack, and potential damage. Generally, Code Red and Code Red II are both worms, which are attacks that propagate themselves through networks without any user intervention or interaction. They both take advantage of a flaw in a component of versions 4.0 and 5.0 of Microsofts Internet Information Services IIS Web server software.

Author(s):
No Author(s) Identified
Author Organization(s):
GENERAL ACCOUNTING OFFICE WASHINGTON DC
Supplementary Note:
Testimony before the Subcommittee on Government Efficiency, Financial Management, and Intergovernmental Relations, Committee on Government Reform, House of Representatives.
Pagination:
0019

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release

RECORD

Collection: TR
Identifying Numbers
Report Number(s):
GAO-01-1073T
Monitor Series:
GAO
 Subject Terms
Joint Capability Areas:
JCA_7_Protection; JCA_5_Command and Control; JCA_6_Net Centric; JCA_6.4.1_Secure Information Exchange; JCA_6.4.2_Protect Data and Networks; JCA_7.1.2_Prevent Non-kinetic Attack; JCA_7.1_Prevent; JCA_6.4_Information Assurance; JCA_7.2.1_Mitigate Lethal Effects; JCA_7.2_Mitigate; JCA_3.2_Engagement; JCA_3_Force Application; JCA_3.2.2_Non-Kinetic Means; JCA_8_Building Partnerships; JCA_8.2_Shape; JCA_8.2.4_Leverage Capacities and Capabilities of Security Establishments; JCA_5.2_Understand; JCA_5.2.3_Share Knowledge and Situational Awareness; JCA_5.3_Planning; JCA_6.1.3_Switching and Routing; JCA_6.1_Information Transport
Modernization Areas:
Cyber
Communities of Interest:
Cyber
Descriptor(s):
*INFORMATION SECURITY, ATTACK, OPERATING SYSTEMS(COMPUTERS), COMPUTER NETWORKS, WORMS, COMPUTER VIRUSES
Field(s)/Group(s):
Computer Systems Management and Standards
Keyword(s):
IATAC COLLECTION, GAO REPORTS, CODE RED, CODE RED II
Report Date:
2001 Aug 29
Creation Date:
2001 Oct 17