Day in the Life of the Internet Storm Center

An anonymous reader writes "Network World Fusion has an article about the Internet Storm Center's inner workings. The writer follows the ISC during the day of the MyDoom-O outbreak (the one that hit Google et al.). The article talks about running W2K in vmware on top of SuSe Linux. A practice very common in malware analysis to isolate yourself from various ill effects of the malware. Other open source software receiving a mention in the article is everybodies favorite packet analyzer Ethereal."

Comments

Malware

[Ford Prefect]

A practice very common in malware analysis to isolate yourself from various ill effects of the malware

Best description of Windows I've heard in ages... ;-)

ethereal.org?

[Anonymous Coward]

Has some "Goddamn Hippy" taken over the packet analyser site?

More "fun" than running viruses in vmware...

[mkavanagh2]

Is running them in WINE. Especially since it's not a virtual machine, and the virus might detect WINE then trash your lunix ;)

On duty, 24/7

[p0]

From TFA :
He is the only full-time staffer among the 30 ISC handlers who span the globe and are on duty 24-7. The rest are volunteers who take turns watching over the Internet. Most have other jobs and aren't expected to be awake for their entire 24-hour shift.

Who the hell is this Ulrich guy? R2D2?

Re:On duty, 24/7

[Big Nothing]

"Who the hell is this Ulrich guy? R2D2"

Funny you should ask...

Here's a pic of Ullrich and here's one of R2D2. Although the picture of R2D2 is a bit old (taken june 12:th, Long Time Ago), it's still obvious that the two are identical or that I am full of shit.

QED.

Virus naming conventions

[AndroidCat]

Does anyone really remember the difference between MyDoom-O and MyDoom-N? Perhaps they should start using first names like real storm centers do for tropical storms/hurricanes. They could issue warnings about incoming class 5 virus MyBad-Kevin.

Re:Virus naming conventions

[c0p0n]

Nope, because you would have to name the viruses with female names. We the /.'ers have enough problems to get a girl, I don't wanna know what could happen if they think that we geeks are male chauvinists...

Re:Ethereal is for the weak

[Timesprout]

snort is for big girls blouses.

Real admins plug the network cable directly into their brains to perform packet analysis

Re:The difference between this and real storm chas

[no reason to be here]

Real storm chasing leads to really cool pictures.

Internet storm chasing leads to porn.

You mean to say porn isn't really cool pictures?

Re:Ethereal is for the weak

[Anonymous Coward]

Real admins plug the network cable directly into their brains

You mis-spelled brains. Its spelled 'ass'

I'm sure today will not be a typical day..

[craznar]

If slashdot lives up to its reputation, I can imagine that today will not quite follow the usual pattern for the ISC.

Re:The Storm Center is excellent

[Anonymous Coward]

Full Disclosure is my favourite. Their archives even contain traffic from 2005 and 2006. I can read about vulnerabilities full two years before they are discovered.

Re:Ethereal is for the weak

[vwjeff]

Real admins plug the network cable directly into their brains to perform packet analysis.

Real admins don't need the cable. They are already one with the network.

Re:Ethereal is for the weak

[Anonymous Coward]

Real admins plug the network cable directly into their brains to perform packet analysis

I really don't want to know what type of viruses you have!

Re:virus

[russint]

One more reason to get rid of all those ancient floppy thingies.

Forecast

[dr_dank]

from the Internet Storm center. Tonight, expect a high pressure system of script kiddies from the northeast to make the morning telecommute messy. Tomorrow, scattered DDOS showers, high of 10000 bots. Now, here's Glenn with sports.