netsec-sig - Re: [Security-WG] FW: Someone Is Learning How to Take Down the Internet

Subject: Internet2 Network Security SIG

List archive

Re: [Security-WG] FW: Someone Is Learning How to Take Down the Internet

From: Paul Howell <>
To: "" <>
Cc: "" <>
Subject: Re: [Security-WG] FW: Someone Is Learning How to Take Down the Internet
Date: Thu, 15 Sep 2016 13:17:54 +0000
Accept-language: en-US
Authentication-results: internet2.edu; dkim=none (message not signed) header.d=none;internet2.edu; dmarc=none action=none header.from=internet2.edu;
Ironport-phdr: 9a23:8rMvSh+xyWCsx/9uRHKM819IXTAuvvDOBiVQ1KB+2u0cTK2v8tzYMVDF4r011RmSAtWdtqkP0reempujcFJDyK7JiGoFfp1IWk1NouQttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBWB6kG1uHQJFx7iLwtpN6HqFabTidi6zea/58eVbglVznLper55MQ+3sRSUqcY+gI1+J7w3xweT5HZEZrIF63lvIAerlgv4rue345Nn92wEo/Im6MNEVY37ebg1V7pVEG5gPmwosp64/SLfRBeCsyNPGl4dlQBFVlDI
Spamdiagnosticoutput: 1:0

Von,

I was simply referring to the theory that tipping off an adversary by
publicly announcing tactics they are using results in an adversary changing
tactics to avoid detection. I don't know if this is actually true, do you
know of any research that disputes this notion?

Regards,
Paul

-----Original Message-----
From:
<>
on behalf of Von Welch
<>
Reply-To:
""

<>
Date: Wednesday, September 14, 2016 at 5:26 PM
To:
""

<>
Cc:
""

<>
Subject: Re: [Security-WG] FW: Someone Is Learning How to Take Down the
Internet

Paul,

> I wish that the threat indicators were included in this story, but
> understand why they are not public.

Jumping on a philosophical soapbox for a second, I don't understand why and
would enjoy understanding your perspective. I worry that these secrecy
practices are holding us back in cybersecurity.

Best,

Von

> On Sep 14, 2016, at 8:43 AM, Paul Howell
> <>
> wrote:
>
> Hi Everyone,
>
> I wish that the threat indicators were included in this story, but
> understand why they are not public. Certainly if we see anything
> threatening, we'll be happy to share with all of you. Hopefully others
> will do the same.
>
> https://www.lawfareblog.com/someone-learning-how-take-down-internet
>
>
> Regards,
> Paul
>
> Paul Howell
> Chief Cyberinfrastructure Security Officer
> Network Services, Internet2
> 100 Phoenix Drive, STE 111
> Ann Arbor, MI 48108
> Office: 734-352-4212
> Email:
>
>
>

[Security-WG] FW: Someone Is Learning How to Take Down the Internet, Paul Howell, 09/14/2016
- Re: [Security-WG] FW: Someone Is Learning How to Take Down the Internet, Von Welch, 09/14/2016
  - Re: [Security-WG] FW: Someone Is Learning How to Take Down the Internet, Paul Howell, 09/15/2016
    - Re: [Security-WG] Someone Is Learning How to Take Down the Internet, Von Welch, 09/17/2016
      - Re: [Security-WG] Someone Is Learning How to Take Down the Internet, Montgomery, Douglas (Fed), 09/20/2016

List archive

Re: [Security-WG] FW: Someone Is Learning How to Take Down the Internet