SITE EXPERIENCE MIT D ALVAREZ M J ROCHLIS EVIENT ISS ES 0 SMALL GROUPS 3 TO 5 0 PHYSICAL PROXIMITY FUNCTIONAL BREAKDOWN COORDINATING PROTECTING RESEARCHING INTERGROUP CONTACTS BOY TELEPHONES - CAREFUL OF IDSN 16 HOURS TO COMMANDS POST 3 HOURS TO SECURE THANKS PETER YEE ERRORS REPORTING KEY TO INTEGRATING SECURITY COMMUNITY INTO SYSTEM MANAGER COMMUNITY EMERGENCY BROADCAST NETWORK- 1200 BAND DIGITAL TAPE RECORDER DON ALVAREZ mx_um_ _mzomm mmxmo umowm 02 3 320mm umwcm a Ncm menBz mI 00 5va 3 mI mx MIT SITE EXPERIENCES JOHN ROCHLIS MIT NETWORK GROUP MARK EICHIN MIT PROJECT ATHENA 0 STUDENT INFORMATION PROCESSING BOARD 0 PROJECT ATHENA 0 MIT LAB FOR COMPUTER SCIENCE 0 MIT MEDIA LAB INTERNETVIRUS OF NOVEMBER 3 1988 A EICHIN MIT SITE EXPERIENCES ROUTING TABLES HOSTS INTERFACE LISTS USER NAME PASSWORD OPERMUTATION 0F USER NAMES 6 - BUILT-IN DICTIONARY FORWARD MARK Don Liv-area bonnet-Wait Nu 111 Center Spaoe 12mm 233-7137 Observations on to man Virus at MIT Work was performed prim-arm by small isolated groups Three to five m91111 ms 1 7331933 313 9 1p9 299133 3 3 3 31 31 fire-1 physical proximity 911911 fit-211199 inner 1 111913ng old boy network Eroups 399m to break along functional lines Coordinating and nIormation Protecting 311-31 11811139913113 Ina-31111193 Researching 311-1 119393 mb13ng mus 31-3-31 311 99 were 31 19 to isolate- and secure 111911 machines 11 313-313 three hours 3319 139-19191 - Peter Ream-3933 rf_ 133- 91- 1 - mare - on 14 mt - 7 - Jul v-u'v a VVA vim-L av '1 4441 Lu Alf-2 -- I - 9 Uttle efforte 3 93 3 311111 9 13 9 311 1 3 inter group awn-3111 9991 telephones 39931-319 computer mail 0' - 2 '3 '7 1 73C11um11d Hot 9 17 I - 3 7 11 I 117 '2 '7 122 135 5 - 1-3 hours 391-3199 3117 2112 31' 39 13 13 - command post 3 13 231 tam- - 3133-931131'99151 9911931 9193- 791 13-9an working on diea 9 39 913113131 91 91 13 3 311-3 1199-3199 to pool resources 0 Eli-3 53 FEE-31119111313 3179 expected V- 331- 91391191133911 9-1333-9- 1339-2 - r 31 1 113-9111139113 9913-191 133-91311 by fear 9111 9 111911 1 19 91m rae 'safe 111391311193 long af er r9inf9c3t9d 313 pp 313 e the 1 59 29 9 93 3 13911931991 r399r 19 3 3911 11 1 1191111991- 339111-331 31 3 7119 1111331911 91' 99313111233999 shattered - Don m HIT Center for Space Research 2534557 'ons 1 Safe use of telephonesi 1 essential Information on the wires could not have been between workers 1Humour 1 1111111 Mixed voice data systems make cleanup much more 11 13 11 and dangerous 1 Greater mixing bemeen system managers and government secunty professmnal is necessary 11 a nationally coordinated response is to be possible 111 the future Most system manager - rion't Know 1an security profesaonals and hence can not 1111 111 111 them 11 - their old boyl network A beo-pronged time delayed attacx would be extremal 1emorai1z1r1g 1 1r11ruir11 111 11111 3 31-1 ond attackm 111- 11 131 1 1111151 groups were disbanding and felt a sense 11 confidence and 3131 131th from their work equivalent 11 Ire Emergency Broadcasting Network i Peter Teeszneenue 13 3 ngle mos-1 eecisiw factor in a timely re t- 11 1212 3111 oa had zone do1m 11 1 rm 21 1 -- - -- - 3 j3digital tape recorder 1' - - - r Lu 2 2111 7121 211111111 1 1'23 x 1 31311111 11 bani JI 9115 11 11931 rible to back 1131 oer rs- womr' be able to 11 51-21 91 11 am pan-mes and code from this clearing house in an manorThis document is from the holdings of The National Security Archive Suite 701 Gelman Library The George Washington University 2130 H Street NW Washington D C 20037 Phone 202 994-7000 Fax 202 994-7005 nsarchiv@gwu edu