Re: State networks DDOS

[Kevin Halgren <kevin.halgren () WASHBURN EDU>]

Perfectly legit question.  We’re number 27 on this list.  From the chatter yesterday it looked to me like after the 
initial attack on Maine, they were ramping up attacks on about 5 entries on that list a day and iterating through it.  
If that pace continued (admittedly a very large assumption), we would pop up on Wednesday, April 1st.  If they took the 
weekend off, as I’ve seen some malicious actors do – that being the workday job – we would pop up on the 3rd.

There are a lot of unknowns and a lot of assumptions so take that prediction with a grain of salt – the main thing is 
they seem to be iterating through the list, and while Kansas is on it, we’re a fair way down, so while an attack can be 
anticipated in the near future it didn’t seem immediately imminent.

Kevin

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Frank 
Barton
Sent: Friday, March 27, 2015 7:39 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] State networks DDOS

This is just me being nosey, but I would love to see the predictions, as compared to observed

On Thu, Mar 26, 2015 at 6:47 PM, Gary Warner <gar () cis uab edu<mailto:gar () cis uab edu>> wrote:
Can you share the list of prior and predicted attacks?

Sent from my iPhone

On Mar 26, 2015, at 1:07 PM, Kevin Halgren <kevin.halgren () WASHBURN EDU<mailto:kevin.halgren () WASHBURN EDU>> wrote:
If you haven’t seen already, there are apparently a series of large DDoS attacks going incrementally after state 
networks..  Not sure what impact it would have on us, if any.  From what I’ve seen (and if I interpret it right) they 
appear to be going down a list and would hit Kansas.gov<http://Kansas.gov> sometime between April 1st and 3rd assuming 
the current pattern holds.  No guarantees, of course.

Kevin Halgren
Assistant Director – ITS Systems and Network Services &
IT Security Officer
Washburn University
1700 SW College Ave
Topeka, KS 66621
785-670-2341<tel:785-670-2341>




--
Frank Barton
Apple Certified Mac Technician
Technology Support Coordinator
Husson University