RIAA site plagued with problems
After being hit with a denial-of-service (DoS) attack over the weekend, the Recording Industry Association of America Inc.'s (RIAA) Web site continued to have problems Tuesday and Wednesday, rendering it inaccessible throughout portions of both days.
The RIAA Web site, at http://www.riaa.org, was knocked offline for part of the day Tuesday and Wednesday. An RIAA representative said that they were experiencing "an unusually large demand" for the Web site, but did not go as far as to say it was due to a DoS attack.
Earlier in the week, the group confirmed that a DoS attack was responsible for taking down the site for portions of last Friday, Saturday and Sunday, however.
The attack began one day after an RIAA-backed anti-piracy bill was introduced in the U.S. House of Representatives, fueling speculation that the powerful music industry group was being targeted.
"The RIAA is a target you would expect to have hit by the script kiddies who are not happy with what they are doing," said Steve Gibson, a security expert and president of Gibson Research Corp. in Laguna Hills, California.
Gibson looked at the RIAA Web site on Tuesday and said, "it has all the symptoms of being under attack."
ISPs (Internet Service Providers) have been able to help organizations fight off hackers by blocking certain types of unusual requests, but new types of DoS attacks that send thousands of regular requests to a server could make it tough for the RIAA to fight hackers.
"There are new tools that are able to issue standard, valid Web requests," Gibson said. "There is no way you can block that. That is what all your desired valuable users need to get to the site."
Users throughout the U.S. and in Europe said they were having trouble accessing the RIAA site, although its performance did appear to improve at times on both Tuesday and Wednesday.
» posted by abennett
IDG News Service
Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.
Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.
Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.
Crimeware: Understanding New Attacks and Defenses
By Markus Jakobsson, Zulfikar Ramzan
Published Apr 6, 2008 by Addison-Wesley Professional. Part of the Symantec Press series.
Enter now! | Official rules | Sample chapter
Securing VoIP Networks: Threats, Vulnerabilities, and Countermeasures
By Peter Thermos, Ari Takanen
Published Aug 1, 2007 by Addison-Wesley Professional.
Enter now! | Official rules | Sample chapter







