<?xml version="1.0" standalone="yes"?>
<?xml-stylesheet type="text/xsl" href="css/rss.xslt"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>FortGuard's Blog  - Articles</title><link>http://www.fortguard.com/blog/</link><description>Protection against DDoS attacks.  - </description><generator>RainbowSoft Studio Z-Blog 1.8 Spirit Build 80722</generator><language>zh-CN</language><copyright>©2003-2009 FortGuard Software Technologies Ltd. All rights reserved.</copyright><pubDate>Thu, 09 Sep 2010 08:45:26 +0800</pubDate><item><title>New style of DNS amplification can yield powerful DDoS attacks</title><author>a@b.com (fortguard)</author><link>http://www.fortguard.com/blog/post/30.html</link><pubDate>Thu, 05 Feb 2009 17:32:26 +0800</pubDate><guid>http://www.fortguard.com/blog/post/30.html</guid><description><![CDATA[<p>&nbsp;New style of DNS amplification can yield powerful DDoS attacks</p><p>&nbsp;</p><p>Angela Moscaritolo         February 04, 2009&nbsp;</p><p>A new class of distributed denial-of-service (DDoS) attacks...</p>]]></description><category>Articles</category><comments>http://www.fortguard.com/blog/post/30.html#comment</comments><wfw:comment>http://www.fortguard.com/blog/</wfw:comment><wfw:commentRss>http://www.fortguard.com/blog/feed.asp?cmt=30</wfw:commentRss><trackback:ping>http://www.fortguard.com/blog/cmd.asp?act=tb&amp;id=30&amp;key=e3597a9f</trackback:ping></item><item><title>Defenses against DDoS strengthening: survey </title><author>a@b.com (fortguard)</author><link>http://www.fortguard.com/blog/post/10.html</link><pubDate>Fri, 28 Nov 2008 12:26:23 +0800</pubDate><guid>http://www.fortguard.com/blog/post/10.html</guid><description><![CDATA[<div id="article_header"><div id="article_title"><h1>Defenses against DDoS strengthening: survey</h1></div><div id="article_subtitle">Results warn of increasing dangers of highly sophisticated attacks at speeds of up to 24 Gbps</div><div id="article_author">By <span>Brad Reed</span> , Network World , 09/17/2007</div>...</div>]]></description><category>Articles</category><comments>http://www.fortguard.com/blog/post/10.html#comment</comments><wfw:comment>http://www.fortguard.com/blog/</wfw:comment><wfw:commentRss>http://www.fortguard.com/blog/feed.asp?cmt=10</wfw:commentRss><trackback:ping>http://www.fortguard.com/blog/cmd.asp?act=tb&amp;id=10&amp;key=d20ee737</trackback:ping></item><item><title>Storm Worm DDoS Attack</title><author>a@b.com (fortguard)</author><link>http://www.fortguard.com/blog/post/8.html</link><pubDate>Fri, 28 Nov 2008 11:54:08 +0800</pubDate><guid>http://www.fortguard.com/blog/post/8.html</guid><description><![CDATA[<h1>Storm Worm DDoS Attack</h1><p><b>Author:</b> Joe Stewart</p><p>A number of anti-spam websites came under a distributed denial-of-service attack on January 12, 2007. The trojan responsible for the attack was one of several dropped onto systems infected by a seeding of the email virus which later came to be called &quot;Storm Worm&quot;, also W32/Small.DAM and Trojan.Peacomm.</p>...]]></description><category>Articles</category><comments>http://www.fortguard.com/blog/post/8.html#comment</comments><wfw:comment>http://www.fortguard.com/blog/</wfw:comment><wfw:commentRss>http://www.fortguard.com/blog/feed.asp?cmt=8</wfw:commentRss><trackback:ping>http://www.fortguard.com/blog/cmd.asp?act=tb&amp;id=8&amp;key=e1cd9007</trackback:ping></item><item><title>MS08-067 Used to Drop DDoS Bots</title><author>a@b.com (fortguard)</author><link>http://www.fortguard.com/blog/post/7.html</link><pubDate>Fri, 28 Nov 2008 11:42:57 +0800</pubDate><guid>http://www.fortguard.com/blog/post/7.html</guid><description><![CDATA[<div class="posted"><div class="posted">Posted on Monday, November 3rd, 2008</div><h2>MS08-067 Used to Drop DDoS Bots</h2></div><p><font size="2">by Jose Nazario </font></p><div class="entrytext"><p>Earlier today we were informed about a bot that we&rsquo;ve seen before, KernelBot, being dropped by an exploit tool for <a onclick="javascript:urchinTracker ('/outgoing/www.microsoft.com/technet/security/Bulletin/MS08-067.mspx');" href="http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx">MS08-067</a>. The exploit code is &ldquo;67.exe&rdquo;, and the bot itself is &ldquo;6767.exe&rdquo;. KernelBot is a Chinese origin DDoS bot run by someone we think uses the handle IceKernel; he even names his project KernelBot: <tt>d:\Works\KernelBots_Up28\Server\Release\Server.pdb</tt>. We first became aware of this bot during the CNN.Com attacks earlier this year; some researchers we were working with brought it to our attention. Since then we&rsquo;ve been watching this guy&rsquo;s activities and seen a handful of DDoS targets, but most of them are Baidu. It&rsquo;s nice to see most of the AV vendors have finally caught up and added detection.</p></div>]]></description><category>Articles</category><comments>http://www.fortguard.com/blog/post/7.html#comment</comments><wfw:comment>http://www.fortguard.com/blog/</wfw:comment><wfw:commentRss>http://www.fortguard.com/blog/feed.asp?cmt=7</wfw:commentRss><trackback:ping>http://www.fortguard.com/blog/cmd.asp?act=tb&amp;id=7&amp;key=b7a906b1</trackback:ping></item></channel></rss>
