Case Study 3.4

0

The case study deals with the problem faced by SCO Group, Inc. after a coordinated attack was launched, on it, by various hackers and programmers who were against the company's policies.


The two fundamental questions raised by the authors pertaining to this particular study are:

        1. to identify the integrated attack launched on the SCO Group, Inc.

        2. what steps should be taken to avoid such attacks

To get a better perspective of the case study there are 3 events that should be looked into:


a) SCO Group, Inc. files a lawsuit against IBM and RedHat, for using its copyrighted work on Linux System V [1]

b) MyDoom worm is launched which causes DDOS(Denial of Service) on the SCO website

c) Hackers attack the SCO website and post derogatory comments


Taking the first question of identifying the integrated attack on the website, the attack was launched on two fronts and went on for about 4 months[1] :

1. The MyDoom worm, was a mass-mailing worm that arrived as an attachment. As soon as a user opens the attachment his/her computer becomes infected and is used to connect to the www.sco.com web site on February 1, 2004, thereby causing a DDOS to occur. There were subsequent attempts to bring down the website for a period of about 10 months[2]

2. Hackers defaced the website of the group and replaced its main banner with the slogan, “We own all your code- Pay us all your money.” [3]


The second question puts the reader in the shoes of the Chief Information Officer of the SCO Group, Inc. and what steps the reader would take to prevent future DDOS attacks on its website to this effect there are a couple of steps that could be taken :

1. An effective anti-virus system be installed on the group's system. 2. A firewall should also be installed to prevent such attacks[4]


CONCLUSION:

To conclude the case study it would be fitting to say that the SCO Group, Inc. should not only try to fend such attacks on it, by technological means but should also try to understand the concerns of the people who have raised their voice against its policies and address them.



Refrences:

[1] http://www.shortnews.com/start.cfm?id=32833

[2]http://ir.sco.com/ReleaseDetail.cfm?ReleaseID=127545

[3]http://news.cnet.com/Image-Screen-shot-of-SCO-hack/2009-7349_3-5469293.html

[4]http://www.us-cert.gov/cas/tips/ST04-015.html



By-

ROHIT RANJAN RAI

1MS07IS083


Comments (0)

Post a Comment