Shimomura’s Analysis (2)

• Detects data exchange from foreign host

• Detects closed connection

• Examines host files on the system

• The attacker leaves a ‘calling card’

• Shimomura informs CERT

Previous slide

Next slide

Back to first slide

View graphic version