Grad Students Theorize on How to Crash Internet

[crustyasp46]

A computer science graduate student and his friends claim to have found a way to use distributed denial of service (DDoS) attacks to take down large gateways of the Internet -- an act never before thought possible.



The method, referred to as the "Coordinated Cross Plane Session Termination (CXPST) Attack," would require approximately 250,000 personal computers to target the Border Gateway Protocol (BGP) network routers in the attack. This style of coordinated denial of service attack is referred to as utilizing botnet, or a virtual "robot" network of computers under the control of a few individuals.

Once a CXPST botnet had been established, it would then utilize a complimentary system of attacks called "ZMW" (named after its authors Zhang, Mao and Wang).

Crashing the Internet

First, the botnet analyzes the current state of BGP connections which measures the time it takes for packets to travel across the Internet from one router to another. The ZMW attacks would then target only the most critical BGP routers, leading to an act known as "route flapping".

Next, a CXPST attack is orchestrated to recognize when a BGP router is resetting and attack other BGP routers as quickly as possible. By the time the initial BGP router comes back online, it's theorized that other supportive routers will go down faster than they can automatically reset themselves. (Source: zdnet.com)

Essentially, the 250,000-computer botnet would account for an increase in traffic load on nearly half of the BGP routers by a factor of 20 or more. With that level of increase, routers would not have a chance to recover from resetting, resulting in a crash.

Manual Reboot Only Option for Repair

"Once the attack has been launched, it would not be solved by any technical means, but by network operators actually talking to each other," says graduate student Max Schuchard. In other words, every BGP router would need a manual reboot. (Source: natparty.com)

While the thought of a complete Internet shutdown would cause havoc for millions of people who rely on the Internet for business, banking, etc., analysts believe that such an attack could never actually happen.

[Hot Trout]

What would be even more cool would be to carry out this attach using nothing but dusted off Commodore 64's. Hundreds of thousands of C64's all wired to the net (via 9600Baud modem) carrying out DOS attaches on a large node.

It would be revenge of the C64

[Kherr]

Too bad the C64 doesn't quite have the computing power to do such a large attack. We're talking needing hundreds of thousands, if not millions of C64 computers to even do a small dent to what ten-thousand of today's computers could do. >.>'

It is a really cool idea though. ;3

[crustyasp46]

I'll volunteer, I've got the C64 and modem, and away we go

[Hot Trout]

What we could do is this,

Use Amazon's Cloud to run 20,000 instances of CCS64 emulator. Emulate 20,000 C64's and then use them to perform the DOS attack.