|
WASHINGTON (AP) —
Researchers uncovered a serious flaw in the underlying technology
for nearly all Internet traffic, a discovery that led to an urgent
and secretive international effort to prevent global disruptions of
Web surfing, e-mails and instant messages.
The British
government announced the vulnerability in core Internet technology
Tuesday.
Left unaddressed, experts said, it could allow
hackers to knock computers offline and broadly disrupt vital
traffic-directing devices, called routers, that coordinate the flow
of data among distant groups of computers.
“Exploitation of
this vulnerability could have affected the glue that holds the
Internet together,” said Roger Cumming, director for England’s
National Infrastructure Security Coordination Centre.
The
Homeland Security Department issued its own cyberalert hours later
that attacks “could affect a large segment of the Internet
community.” It said normal Internet operations probably would resume
after such attacks stopped. Experts said that there were no reports
of attacks using this technique.
The risk was similar to
Internet users “running naked through the jungle, which didn’t
matter until somebody released some tigers,” said Paul Vixie of the
Internet Systems Consortium Inc.
“It’s a significant risk,”
Vixie said. “The larger Internet providers are jumping on this big
time. It’s really important this just gets fixed before the bad guys
start exploiting it for fun and recognition.”
The flaw
affecting the Internet’s “transmission control protocol,” or TCP,
was discovered late last year by a computer researcher in Milwaukee.
Paul Watson said he identified a method to reliably trick personal
computers and routers into shutting down electronic conversations by
resetting the machines remotely.
Experts previously said that
such attacks could take between four years and 142 years to succeed
because they require guessing a rotating number from roughly 4
billion possible combinations. Watson said that he can guess the
proper number with as few as four attempts, which can be
accomplished within seconds.
Routers continually exchange
important updates about the most efficient traffic routes between
large networks. Continued successful attacks against routers can
cause them to go into a standby mode, known as “dampening,” that can
persist for hours.
Cisco Systems Inc., which acknowledged its
popular routers were among those vulnerable, distributed software
repairs and tips to otherwise protect large corporate customers.
There were few steps for home users to take; Microsoft Corp. said it
did not believe Windows users were too vulnerable and made no
immediate plans to update its software.
|