Slashdot Mirror

← Back to Stories (view on slashdot.org)

IBM's Billy Goat Squashes Worms

Posted by Hemos on Monday September 1, 2003 @01:02AM from the behavior-based-activity dept.

fr0z writes "InformationWeek is running a story on "Billy Goat", a novel worm-squashing software developed by researchers in Zurich, Switzerland. IBM says it wants to turn Billy Goat into a product to help guard against computer-network attacks such as those that slowed Internet traffic earlier this month."

2 of 170 comments (clear)

Min score:

Reason:

Sort:

Re:inapproporiate title? by farnz · 2003-09-01 01:15 · Score: 5, Informative

Something like Blaster scans the network for vunerable machines; some of these IPs are unassigned. Billy Goat detects the attempts to access unassigned IPs, and alerts admins/firewalls your box off/generally makes noise.
The result is that something like Blaster gets caught before your whole network is infested; Billy Goat ignores a slashdotting, since all the traffic goes to assigned IPs.

--
I appear to have a blog. Odd.
LaBrea by MoogMan · 2003-09-01 01:58 · Score: 5, Informative

LaBrea - the "Sticky Tarpit". Seems like the same concept, and has a working, free implementation at http://labrea.sourceforge.net/