Re: Traces

[Fernando Gont <fernando () gont com ar>]

At 11:57 16/12/2003 -0800, Gerson Sampaio wrote:

> Hi list,
> is there any paper / site on hiding traces of an
> attack. How to discover a real source of an attacker ?

IIRC, there's a paper by W. Venema on finding the originator of a flooding 
attack.
Google for it. If you don't find it, I can have a look at my paper archives....


--
Fernando Gont
e-mail: fernando () gont com ar || fgont () acm org



---------------------------------------------------------------------------
----------------------------------------------------------------------------