""

, , "" "", . IT , , .

: , . , , - - Web , "" -

Code Red 2001 . , , Code Red DDos IP . Code Red, , 2003 W32.SQLExp , .

, , Internet , , IP , ( : 10..., 172.16.., 192.168..). . , "" , . , IP , . , , , W32.SQLExp Blaster .

, "" : . , . : , , . : , , "" . : .

""? , Code Red, , . , , , . .

"" .

, "", Windows, , . , Windows "".

Code Red I

Code Red http . Microsoft IIS, , , IIS ( LocalSystem).

Code Red I - , , . , "", .

W32.SQLExp ( SQL Slammer SQL Sapphire)

"", W32. SQLExp, SQL Slammer, SQL Sapphire, UDP . UDP , "" , .

Microsoft SQL Server. SQL Server Resolution Service, 1434 UDP . UDP , , , "" , .

UDP , , W32.SQLExp , , sendto() , . , , UDP .

( , ), , 15 .

W32.Blaster W32.Blaster DCOM ( ) RPC ( - , ; - ; , , DCOM, CORBA, Java RMI). DCOM , . RPC Windows Windows.

2003, DCOM, . network/file- DCOM . , , , , . "" , , , TFTP. Code Red W32.SQLExp, W32.Blaster , , .

, "" , "". , DMZ, (ACL) , (NAT/PAT) . .

Code Red v1 v2 Code Red , , , IP . "" , , , , . SYN , Code Red 2, 11 . 11 .

, . IP 11 . , , 1 4.2 . , 12 . , , .

: AdressRange/(2 * VulnAddress * PropagationRate) , : AdressRange , . VulnAddress - PropagationRate - Code Red v.2: 255*255*255*255/(2*100*11)

, , . , IP , IP . "" Code Red - , , .

W32.SQLExp W32.SQLExp Code Red, . , , 20 . , Code Red.

W32.SQLExp , , , . = 404 UDP + 30 Ethernet = 434 . 100 80% ( ) W32.SQLExp 23,041 . 1 4,2 5 . , Code Red , 150 , : 255*255*255*255/2*150*23,041

W32.Blaster W32.Blaster - . Blaster W32.SQLExp.

Blaster , . 20 12, , 12, . , , IP . , 20.

"" , . , "" , . , "", Code Red SQL Slammer, , , W32.Blaster.