## Internet Dying
##
## $Id: dying.atm,v 1.5 2004/02/09 01:46:36 rho Exp $

internet-health-report (web-site)
bn: Internet Health Report
oc: http://www.internethealthreport.com/
oc: http://www1.internetpulse.net/
in: high level status information between major ISPs -- agents on each backbone ping each other
oc (agent-list): http://www.keynote.com/agent_location/agent_location_tpl.html
in: free version only contains US backbones

(show-status-of)
object: internet
display: internet-health-report

internet-storm-center (web-site)
bn: Internet Storm Center
in: diagrams about most frequent port scans -- 135, 80, 137 usually leading
oc (homepage): http://isc.sans.org/
in (comment): web site ugly as hell

(show-status-of)
object: internet
display: internet-storm-center


(improves-health)
organism: internet
measure: pipe-scrubbing

pipe-scrubbing
bn: TCP/IP Pipe Scrubber - FREE
in: this is fun -- THIS IS FUN, BELIEVE ME!
oc: http://gbrockman.com/pipescrubber/
in: also available as Enterprise Edition

#--

internet-dying (theory)
bn: The Internet is Dying
in (trend): Internet infrastructure will remain -- as a carrier for the big media -- carrier layer, infrastructure layer -- content layer
in (observation): for many non-techies the Internet is a huge disappointment -- chaos, trash, fear, addiction
in (opinion): Internet will become "a development that promises social control on a scale those\
    quaint old 20th-century tyrants with their goofy moustaches could only dream about"
oc (opinion): http://cyberlaw.stanford.edu/lessig/blog/archives/2003_05.shtml#001180
oc (opinion): http://www.circleid.com/article/215_0_1_0_C/
oc (media): http://www.theregister.co.uk/content/6/30733.html
oc: http://www.theregister.co.uk/content/22/36744.html

#-- only few players

(is-founded-on)
foundation: only-few-players
conclusion: internet-dying

only-few-players (thesis)
bn: There will only be a few players left
in (content): AOL-TW, NewsCorp, Disney, Viacom
in (logistics): AOL-TW, Viacom, MSN, ?
in (carrier): BT, AT&T, SingTel, Sprint, ...
in (ISP): CW, AOL, MSN, ?
in (software): Microsoft (vertically diversified), IBM (riding on patents) -- Sun will survive?

(is-supported-by)
thesis: only-few-players
observation: massive-company-concentration

massive-company-concentration (mega-trend)
bn: Massive concentrations
in: not only media -- also in other sector (energy, infrastructure, ...)
in: Microsoft buys whatever goes -- innovation in the face of MS?

(is-subclass-of)
superclass: massive-company-concentration
subclass: media-concentration

media-concentration
bn: Media Concentration
oc: http://www.sarahstirland.com/archives/mediacon.htm
in: Berlusconism
oc (quote): http://www.brainyquote.com/quotes/quotes/n/noamchomsk143312.html

media-concentration-australia (media-concentration)
in: Rupert Murdoch and Kerry Packer -- casino, cable-TV, digital spectrum and broadband operation
in: ninemsn partnership with .... Microsoft -- ninemsn.com.au homepage for every new PC
in: all football, cricket, tennis rights


#-- CDNs raising

(is-supported-by)
thesis: only-few-players
observation: raise-content-delivery-networks

raise-content-delivery-networks (trend)
bn: Raise of CDNs
in: CDNs distribute content to the periphery -- closer to the customer -- handled almost transparently -- branding remains
in: CDNs co-locate special proxies with ISPs -- use their own hardware, software and protocols -- no more HTTP
in: big players Akamai (12000 servers worldwide) -- Cisco CDN -- Digital Island
oc: http://www.isp-planet.com/technology/cdn_connection.html
oc (forecast): http://www.wintergreenresearch.com/reports/CDN.htm
oc (media): http://www.nwfusion.com/news/2001/0924carrier.html



#-- innovation controlled

(is-reason-for)
reason: only-few-players
consequence: innovation-controlled

innovation-controlled (mega-trend)
bn: Innovation fully controlled
in: no individual innovation -- only with patent lawyers in your back -- only big players can afford that
in: start-ups stand little chance -- only goal is buy-out by a large player?
in (example): ISO asks for royalties fro country codes
in (example): SCO asks for UNIX licences
in (example): Eolas ask for plugin licences
in (consequence): Interfaces get more complicated -- scattered 'standards'
in (consequence): innovation become marketing efforts

(has-consequence)
consequence: innovation-by-marketing
reason: innovation-controlled

innovation-by-marketing
bn: Innovation by Marketing
in: companies invent technologies so difficult to use that you need development environment -- which these companies sell


#-- internet full of sick people

(is-founded-on)
foundation: full-sick-people
conclusion: internet-dying

full-sick-people (thesis)
bn: Internet is full of sick people
in: addicts, gamers, DVD-watchers, 24/7 porn surfers, child porn, religious fanatics, scammers, hackers, spammers, ID theaves

(is-supported-by)
thesis: full-sick-people
observation: internet-addiction

internet-addiction
oc: http://www.ogaming.com/content/editorials-internetaddiction.php
oc: http://news.bbc.co.uk/1/hi/world/asia-pacific/2499957.stm
in: South Korea has 25000! Internet Cafes -- 10 million broadband users
in: 24-year-old Kim Kyung-jae collapsed and died after playing computer games at an internet cafe non-stop for 86 hours
oc (definition): http://www.netaddiction.com/whatis.htm
oc (media): http://www.media52.net/archives/000032.html
oc (media): http://www.theregister.co.uk/content/6/32821.html

#-- scam

(is-subclass-of)
superclass: crime
subclass: cyber-crime

cyber-crime
oc (mail-archive): http://www.themezz.com/cybercrime/archive/

(is-subclass-of)
superclass: crime
subclass: fraudulent-activity

(is-subclass-of)
superclass: fraudulent-activity
subclass:   internet-scam

internet-scam
bn: Internet Scams
in: Internet excellent tool for fraudsters
in: via email -- chat
in: get rich fast -- you have won in the lottery but you must pay a fee
oc: http://www.theregister.co.uk/content/6/33706.html
oc (government-warning): http://www.sec.gov/investor/pubs/cyberfraud.htm

nigerian-scam (internet-scam)
bn: Nigerian Scam
in: 419 frauds -- third to fifth largest industry in Nigeria
oc: http://home.rica.net/alphae/419coal/
oc: http://www.snopes2.com/inboxer/scams/nigeria.htm
oc: http://slashdot.org/article.pl?sid=03/11/06/2042205
oc (example): http://www.quatloos.com/scams/nigerian.htm
in (example): ....requested by the Nigerian National Petroleum Company to contact you for assistance in resolving a matter...\
   move these funds to another region.
oc: http://www.crimes-of-persuasion.com/Crimes/Business/nigerian.htm
oc (use-case): http://www.geocities.com/a_kerenx/
oc (countermeasures): http://www.scamorama.com/
oc (example): http://sweetchillisauce.com/nigeria.html

(is-supported-by)
thesis: full-sick-people
observation: internet-scam

(perform-activity)
activity: internet-scam
person : scammer

(is-supported-by)
thesis: full-sick-people
observation: metascam

metascam
bn: Meta Scam
in: warning from scam -- information newsletter -- free checks
oc (example): http://www.scambusters.org/
oc (example): http://www.scambusters.org/scamcheck.html
oc (example): http://www.nigerianscams.org/


#-- spammers --------------------

(is-subclass-of)
superclass: crime
subclass: spamming

(perform-activity)
activity: spam
person: spammer

spam
bn: SPAM
oc (analysis): http://papers.ssrn.com/sol3/papers.cfm?abstract_id=488444
oc (clearing-house): http://spam.abuse.net/
oc (counter-measure): http://spamassassin.org/
oc (legal): http://www.spamlaws.com/
oc: http://www.paulgraham.com/spam.html

CAUCE (organisation)
bn: CAUCE, The Coalition Against Unsolicited Commercial Email
oc: http://www.cauce.org/
oc (au): http://www.caube.org.au/
oc (eu): http://www.euro.cauce.org/

(is-opposed-to)
opposition: CAUCE
activity: spamming

## http://www.hostedscripts.com/scripts/antispam.html

(is-supported-by)
thesis: full-sick-people
observation: spam

#-- global search engines have problems

(is-founded-on)
foundation: dying-google
conclusion: internet-dying

dying-google (thesis)
bn: Google will become useless
in: search engines like google will become less and less useful -- their asset is the ranking --\
  ranking will be undermined by the web itself
in: link spammers: build huge farms of HTML pages linking to their primary site
in: bombers: throwing huge amount of queries against the machine
in: products: MoveableType blogs: trackbacking feature
oc: http://www.theregister.co.uk/content/35/33448.html
oc: http://www.theregister.co.uk/content/6/33366.html
oc: http://www.theregister.co.uk/content/6/33180.html
oc: http://www.theregister.co.uk/content/6/33141.html

(is-reason-for)
reason: trackback-blog-feature
consequence: dying-google

#in: (example): "OS X Panther"


trackback-blog-feature (feature)
bn: Moveable Type Trackback Feature
oc: http://www.movabletype.org/docs/mtmanual_trackback.html
in: auto-citation feature -- blogs referencing each other

(is-feature-of)
feature: trackback-blog-feature
system: moveable-type

moveable-type (product)
bn: Moveable Type
oc (manual): http://www.movabletype.org/docs/mtmanual.html


google (company)
bn: Google
oc: http://www.google.com/
in: Microsoft wants to buy? http://www.infoworld.com/article/03/10/31/HNmsgoogle_1.html
oc (critique): http://www.google-watch.org/email.html

(is-relying-on-technology)
entity: google
technology: pagerank


pagerank (search-engine-technology)
oc: http://www.google.com/technology/
bn: PageRank (TM)
in: interprets a link from page A to page B as a vote, by page A, for page B

(has-problems)
entity: pagerank
problem: pagerank-problem

pagerank-problem (negative-feature-list)
oc: http://jeremy.zawodny.com/blog/archives/000751.html
oc: http://a.wholelottanothing.org/archives.blah/007181
oc: http://www.kottke.org/03/08/030801topics_on_wh.html

(is-acquired-by)
buyer: google
acqusition: sprinks

#is reified http://www.theregister.co.uk/content/6/33584.html

sprinks (company)
oc: http://www.sprinks.com/
in: leading competitor to the two giants, Overture's Content Match and Google's Adsense Programs.

(is-acquired-by)
buyer: google
acqusition: kaltix

kaltix (company)
bn: Kaltix
in: personalized and context-sensitive search technology


(is-acquired-by)
buyer: google
acqusition: applied-semantics

applied-semantics (company)
oc: http://www.appliedsemantics.com/company/index.html
in: CIRCA ontology, which "understands, organizes, and extracts knowledge from websites and information repositories in a way that mimics human thought".

#-- Internet Infrastructure endangered ------

(is-founded-on)
foundation: internet-infrastructure-endangered
conclusion: internet-dying



internet-infrastructure-endangered (thesis)
bn: Internet Infrastructure Endangered
oc: http://www.eweek.com/print_article/0,3048,a=16844,00.asp
oc: http://archive.infoworld.com/articles/hn/xml/01/10/24/011024hndos.xml
oc  @ year-1999 (study): http://www.nist.gov/itl/lab/bulletns/may99.htm
in: protecting the perimeter -- protecting the core?
in (countermeasure): massive overprovisioning -- replication -- diversified risk

(is-endangered-by)
object: internet-infrastructure
threat: ddos-attacks

internet-infrastructure (technical-infrastructure)
bn: Internet Infrastructure
in: all systems which guarantee the proper functioning of the core Internet -- routers -- root DNS
in: major ISPs, CNN, Yahoo!, eBay, Microsoft, FBI, CERT -- do they belong to the infrastructure?

ciag (alliance)
bn: Critical Infrastructure Assurance Group, CIAG
oc: http://www.cisco.com/security_services/ciag/
in: Cisco initiative -- awareness/education/training -- incident response -- research


(is-part-of)
part: root-dns-servers
whole: internet-infrastructure

(is-part-of)
part: web-service
whole: internet-infrastructure

(is-part-of)
part: user-client-machines
whole: internet-infrastructure


#-- DDoSes -----------------------------------------

(is-subclass-of)
superclass: network-attack
subclass: ddos-attacks

ddos-attacks
bn: DDoS Attacks
oc: http://www.cs3-inc.com/pk_generalrelease.html
in (study): 4000 DoS attacks each week
in: difficult to cope with -- bogus requests from thousands of machines across the network
in: usually completely automated


(is-used-by)
user: ddos-attacks
used: zombied-machine

(is-used-by)
user: ddos-attacks
used: router

(is-subclass-of)
superclass: networked-device
subclass: zombied-machine

zombied-machine
bn: Zombie(d) Machine
in: under the control of hacker(s) -- usually remote control
in: usually machines with high bandwidth but low user understanding

#- reasons

(are-facilitated-by)
facility: windows-computer-vulnerabilities
activity: ddos-attacks

windows-computer-vulnerabilities (computer-vulnerability)
in: 94% of all consumer client software is Windows based (IDC) -- 97% of all desktops use Windows (onestat.com, 2002)
in: steady increase in the ability for intruders to easily deploy large DDoS attack networks
in (history): code red, nimda, Sobig, Kurnikova, Slammer, ....
in (costs): estimate 30 billions USD per worm -- 100 billion USD p.a. (mi2g Ltd, 2002)
in: patches as service packs: aggregated, not immediate -- patches are cumbersome to install (download, click, click, click)\
  -- the 'Microsoft Experience'

(are-consequence-of)
consequence: computer-vulnerabilities
prerequsition: windows-complexity

windows-complexity
bn: Windows Complexity
in: Windows API has thousands of system calls -- compared to a few hundred in other OSes -- source code increases by 35% p.a.
in: Windows has to look for much backwards compatibility -- complex change management -- marketing driven feature creep
in: Windows is 'tightly integrated' (aka monolithic) -- no room for 3rd party except for HW drivers -- OS lock-in
in: Windows applications (MSIE) are tightly integrated -- application lock-in -- increase 200% in size p.a.
in (consequence): sucessful strategy to lock out competition -- will be used with Longhorn as well (new API, new file system)
in (observation): law of diminishing return (80:20)
in (consequence): fixing one flaw introduces others

(are-facilitated-by)
facility: moores-law
activity: ddos-attacks

moores-law (empirical-law)
bn: Moore's Law
in: Gordon Moore, 1965: IC density increase is exponential over time
oc (paper): ftp://download.intel.com/research/silicon/moorespaper.pdf
oc: http://www.intel.com/research/silicon/mooreslaw.htm
oc: http://www.webopedia.com/TERM/M/Moores_Law.html
oc: http://info.astrian.net/jargon/terms/m/Moore_s_Law.html
oc (analysis): http://www.firstmonday.dk/issues/issue7_11/tuomi/
oc: http://www.arstechnica.com/paedia/m/moore/moore-1.html
in (consequence): currently CPU power doubles every 18 months
in (consequence): computing power on the Internet doubles every 10 months
in (consequence): storage density per dollar doubles every 9 months

(are-facilitated-by)
facility: metcalfes-law
activity: ddos-attacks

metcalfes-law (empirical-law)
bn: Metcalfe's Law
oc: http://www.mgt.smsu.edu/mgt487/mgtissue/newstrat/metcalfe.htm
in: "value" or "power" of a network increases in proportion to the square of the number of nodes on the network
oc: http://rhonabwy.com/productsAreNetworks.html
oc: http://www.nautilus.org/info-policy/axioms/axiom1.html
oc: http://www-ec.njit.edu/~robertso/infosci/metcalf.html
oc: http://www.wikipedia.org/wiki/Metcalfe's_law
oc: http://searchnetworking.techtarget.com/sDefinition/0,,sid7_gci214115,00.html
oc: http://www.nwfusion.com/links/Encyclopedia/M/771.html
oc (analysis): http://webword.com/moving/metcalfe.html

(has-postulated)
postulate: metcalfes-law
person: robert-metcalfe

(has-invented)
inventor: robert-metcalfe
invention: ethernet-protocol

(has-founded)
founder: robert-metcalfe
organisation: 3com

3COM (company)
bn: 3COM

(are-facilitated-by)
facility: reeds-law
activity: ddos-attacks

reeds-law (empirical-law)
bn: Reed's Law
in: people organized in groups -- value increase exponentially -- much faster growth than predicted by Metcalfe's Law
in: mailing lists -- chat rooms -- true ? -- usenet trolls
oc: http://www.reed.com/Papers/GFN/reedslaw.html
oc: http://en.wikipedia.org/wiki/Reed's_law
oc (analysis): http://arnoldkling.com/~arnoldsk/aimst3/aimst304.html
oc (consequence-virus): http://www.atomiq.org/archives/000726.html
oc (consequence-virus): http://www.cs.unm.edu/~immsec/publications/Email%20Networks%20and%20the%20Spread%20of%20Computer%20Viruses.pdf

(are-facilitated-by)
facility: roberts-law
activity: ddos-attacks

roberts-law (empirical-law)
bn: Robert's Law
in: skill of user is reciprocal with the processing power on the desktop

(are-negatively-impacted-by)
impact: gates-law
activity: ddos-attacks

gates-law (empirical-law)
bn: Gates' Law
in: The speed of software halves every 18 months -- bloatware syndrom
oc: http://info.astrian.net/jargon/terms/g/Gates_s_Law.html

#-- ebay attacked

eBay (web-service)
bn: eBay
oc (homepage): http://www.ebay.com/

(is-attacked-via)
weapon : ddos-attacks
victim: ebay

# reifies assoc above
ebay-attacks (attack)
bn: eBay attacks
in: 2000 -- Tribe Flood Network, Trinity and Stacheldraht -- ICMP floods -- Mafiaboy (schoolboy, was caught eventually)

#-- core routers

(is-attacked-via)
weapon : ddos-attacks
victim: core-routers


#-- root DNS

root-dns-servers
oc: http://www.spacedaily.com/news/internet-03f.html
oc (analysis): http://www.caida.org/projects/dns-analysis/

(is-attacked-via)
weapon : ddos-attacks
victim: root-dns-servers

# reifies associ above
root-dns-server-attacks
in: 13 root DNS servers -- hold TLD data, .edu -- .com .net .org (moved to somewhere else?)
in: 5000 - 12000 queries per second -- DoS attack 38000 per second -- saturates all bandwidth
oc (study): http://www.caida.org/outreach/presentations/ietf0112/dns.damage.html
in: using root servers as 'deflectors' -- faked source address kills victim
in: actually a majority of request is already bogus (broken MS resolver, leaked 1918 queries, ...)
in: Oct 21, 2002 all 13 were attacked simultaneously -- attack from South Korea? --  80,000 zombie machines in South Korea
oc (analysis): http://www.caida.org/projects/dns-analysis/oct02dos.xml
oc (media): http://amo.net/NT/10-23-02DOS.html
oc (media): http://www.internetnews.com/dev-news/article.php/1486981
in (countermeasure): massive overprovisioning
oc (media): http://www.theregister.co.uk/content/29/27731.html
oc (countermeasure): http://ops.ietf.org/lists/namedroppers/namedroppers.2002/msg01936.html
oc (countermeasure): http://www.govtech.net/news/news.phtml?docid=2002.11.07-3030000000028145
oc (media): http://www.washingtonpost.com/ac2/wp-dyn?pagename=article&node=&contentId=A46872-2002Oct31&notFound=true
oc (countermeasure): http://isp-lists.isp-planet.com/isp-dns/0210/msg00093.html
oc (media): http://zdnet.com.com/2100-1107-979650.html
oc (media): http://news.com.com/2100-1001-963005.html?part=wht&tag=wtop


(is-affiliated-with)
affiliate:  johannes-ullrich
affiliation: internet-storm-center
role : cto


(is-affiliated-with)
affiliate: louis-touton
affiliation: ICANN
role : vice-president

ICANN
bn: ICANN

(is-affiliated-with)
affiliate: paul-vixie
affiliation: ISC
role : chairman

ISC (organisation)
bn: Internet Software Consortium


caida (organisation)
bn: CAIDA, Cooperative Association for Internet Data Analysis
in: located near SDSC
oc (homepage): http://www.caida.org/

(is-affiliated-with)
affiliation: caida
affiliate: duane-wessels
role: researcher


#-- 

(is-founded-on)
foundation: few-companies-will-control-technology
conclusion: internet-dying


few-companies-will-control-technology (thesis)

(is-supported-by)
thesis: few-companies-will-control-technology
observation: eolas-case


eolas-case (patent-discourse)
bn: Eolas against W3C
oc (discussion): http://lists.w3.org/Archives/Public/public-web-plugins/2003Oct/thread.html
oc (news): http://www.theregister.co.uk/content/6/33692.html
oc (news): http://www.theregister.co.uk/content/4/32281.html
oc (news): http://www.theregister.co.uk/content/4/33281.html
oc (view): http://www.mozillazine.org/talkback.html?article=3786
oc (discussion): http://lists.w3.org/Archives/Public/public-web-plugins/2003Oct/thread.html
in: Eolas Technologies Inc. sued Microsoft -- claiming infringement on embedding objects into HTML -- Eolas got $521 million --\
  MSIE will change in a not-backward-compatible way

(is-supported-by)
thesis: few-companies-will-control-technology
observation: sco-case

sco-case (patent-discourse)
bn: SCO against the UNIX world
oc (analysis): http://www.groklaw.net/article.php?story=20031022014413296

(is-supported-by)
thesis: few-companies-will-control-technology
observation: microsoft-monopoly-tactics

microsoft-monopoly-tactics (monopoly)
bn: Microsoft monopolist tactics
in (analysis): Microsoft is using APIs and file formats to outflank and lock out competition --\
   Antitrust has disrupted Microsoft's efforts to bundle its client OS with other applications (Michael Silver, Gartner analyst)
in: new APIs: WinFX against Java APIs -- WinFS: many vendors loose control on the store
oc (article): http://www.theregister.co.uk/content/7/36777.html

(is-supported-by)
thesis: few-companies-will-control-technology
observation: iso-asks-for-royalties-cc

iso-asks-for-royalties-cc
bn: ISO asks for royalites of Country Codes
oc: http://www.xml.com/pub/a/2003/09/24/deviant.html

(is-supported-by)
thesis: few-companies-will-control-technology
observation: palladium

palladium
bn: Palladium, Next Generation Secure Computing Base
in: CPU built-in "security" -- mainly for identifying hardware
in: hardware platform to implement copyright enforcement applications (DVD, CD, ...) -- DRM
in: may be based on an additional TCPA-compliant chip on the board -- may be within the processor itself
in: 'parallel OS' secure kernel, the "Nexus" -- does not necessarily run all times -- only when an agent (e.g. player) needs it
oc: http://www.theregister.co.uk/content/3/33640.html
in: 3rd party applications use 'secure components to establish trust'
oc: http://www.theregister.co.uk/content/archive/28016.html
in: create shadowed memory where code can execute but you can't debug it
oc: http://www.theregister.co.uk/content/archive/28016.html

(is-compliant-with)
compliance: TCPA
technology: palladium

TCPA (alliance)
bn: Trusted Computing Platform Alliance (TCPA)

(is-used-for)
means : palladium
user  : microsoft
use   : enforcing-media-copyrights

(is-used-for)
means : palladium
user  : microsoft
use   : reducing-windows-based-security-flaws

(is-used-for)
means : palladium
user  : microsoft
use   : locking-out-non-windows-os

(is-used-for)
means : palladium
user  : microsoft
use   : us-national-security-enforcement

locking-out-non-windows-os (suspicion)

us-national-security-enforcement (suspicion)
in: FBI, NSA are your friend

enforcing-media-copyrights
bn: Enforcing Media Rights
in: software theft, CD burning, file sharing
in (means): watermarking
in (means): massive web scans (university sites)
in: RIAA against 15yo -- students -- universities

#-- malware

(is-founded-on)
foundation: malware-will-never-stop
conclusion: internet-dying

malware-will-never-stop (thesis)
bn: Malware will never stop
in: worms, virusses (viri), popups
in: wireless networks increasingly popular -- new form of attacks -- lets wait for Bluetooth
in: massive low-speed scans underway -- something big is going to happen
in: usual suspects: Microsoft IIS, Microsoft Exchange, and the various P2P and AOL/MSN messenger 

(is-subclass-of)
superclass: digital-pathogen
subclass: malware

malware
bn: Malware, Malicious Software
oc: http://www.securityfocus.com/infocus/1695
oc: http://www.securityfocus.com/infocus/1698

(is-subclass-of)
superclass: malware
subclass: internet-worm

internet-worm
bn: Internet Worms
in: spread through vulnerabilities in server (or daemon on client machines)
in: completely automated -- Windows primary target

(is-subclass-of)
superclass: internet-worm
subclass: warhol-worms

warhol-worms
oc: http://www.cs.berkeley.edu/~nweaver/warhol.html
bn: Warhol worms
in: can spread within 15 minutes


code-red (internet-worm)
oc (media): http://www.eeye.com/html/Research/Flash/AL20030125.html
oc (analysis): http://www.renesys.com/projects/bgp_instability/

sql-slammer (internet-worm)
oc (exploit): http://groups.google.com/groups?dq=&hl=en&lr=lang_en&ie=UTF-8&oe=UTF-8&group=microsoft.public.applicationcenter.admin&selm=079201c2c4aa%241877e430%248df82ecf%40TK2MSFTNGXA02

saphhire-sql (internet-worm)
oc: http://www.eeye.com/html/Research/Flash/AL20030125.html
oc (scanner): http://www.eeye.com/html/Research/Tools/SapphireSQL.html

nimda (internet-worm)
bn: Nimda

sircam  (internet-worm)
bn: SirCam

(is-subclass-of)
superclass: malware
subclass: virus

virus
bn: Virus
in: spreads via infection vectors: email, netbios file-shares, p2p file sharing
oc (monitor): http://www.messagelabs.com/viruseye/


anna-kurnikova (virus)

melissa (virus)

sobig (virus)

mimail (virus)
oc (media): http://www.infoworld.com/article/03/10/31/HNnewworm_1.html

(is-subclass-of)
superclass: malware
subclass: webbugs

webbugs
bn: Web Bugs
in: small inline images embedded into HTML email -- notifies sender that email has been 'opened' -- good to validate email addresses
in: annoyance and privacy intrusion

(is-subclass-of)
superclass: malware
subclass: spam-email



#-- email unusable

(is-founded-on)
foundation: email-will-by-completely-unusable
conclusion: internet-dying

email-will-by-completely-unusable (lemma)
bn: Email unusable
in: worms, virusses (viri) -- innocent victims receive 'echos': complaints that infected email has been sent -- ISP server landscape breaks down (Telstra)
in: productivity drain -- forwarding chains by 'executives' -- commercials/infomercials -- staff spends hour on writing/reading email
in: spam threat -- even Bayesian filters may not work -- Bill Gates' suggestion of 'certified marketeers'
in: no one really answers email anymore

#-- majority traffic is useless

(is-founded-on)
foundation: majority-traffic-useless
conclusion: internet-dying

majority-traffic-useless (lemma)
bn: Majority of Traffic is useless
in: inline images make most of the HTTP traffic (80%/20%)
in: 15-30% of email is spam (my ratio is 90:10)
in: 90% of UseNet traffic is porn, music or video
in: 80% of DNS traffic useless
in: file-sharing (KaZaa, eDonkey, ...) is becoming more popular
oc (use-case): http://www.cit.cornell.edu/computer/students/bandwidth/charts.html

(is-supported-by)
observation: spam-email-traffic
thesis: majority-traffic-useless

spam-email-traffic
bn: Spam Traffic Statistics
in: between 15% and 50% of email traffic is spam
oc (example): http://www.thewrightplace.net/stats/spam/spam_spam.html
oc (example): http://www.abdn.ac.uk/diss/email/spamstats.hti
oc (example): http://www.raunvis.hi.is/spamcount.html
oc (example): http://monga.karlus.net/spamassassin/spam_spam.html

(is-supported-by)
observation: massive-ongoing-scans
thesis: majority-traffic-useless

massive-ongoing-scans
bn: Massive ongoing scans
in: single user machine receives 1-10 requests per second -- between 1 and 10 'full scans' per day
in: worse for web servers -- scan for vulnerable scripts -- 
oc (paper): http://project.honeynet.org/papers/stats/
oc (example): http://www.btinternet.com/~shawweb/george/hacks/graphs1.html
oc (clearing-house): http://isc.sans.org/
oc (example): http://www.anti-trojan.net/en/reportportsmonth.aspx

(is-supported-by)
observation: usenet-traffic-statistics
thesis: majority-traffic-useless

usenet-traffic-statistics
oc @ year-1995: http://www.tlsoft.com/arbitron/mar95/mar95_top40_megabytes.html
oc (use-case): http://peer-00.news.insnet.cw.net:8080/innreport/
oc @ year-2003: http://peer-00.news.insnet.cw.net:8080/peralthtraf-yesterday.html

(is-supported-by)
observation: unnecessary-dns-traffic-statistics
thesis: majority-traffic-useless

unnecessary-dns-traffic-statistics
bn: DNS traffic unnecessary
oc: http://www.circleid.com/article.php?id=P102_0_1_0_C
oc: http://www.caida.org/projects/dns-analysis/
oc (study): http://www.caida.org/~broido/dns/rfc1918.html


%cancel