Software Program Offers Full-On Attacks on Target Servers   12/3/2004 - 837 views, 2 Comments

A company called Symbiot has developed a software package which is ostensibly designed to protect your system from attacks…by mounting a good offense qua defense.

Using a process which it calls “Graduated Response”, the software first attempts to block the attacking packets, or deflect them to another target (that sounds abuseable, doesn’t it?), or simulate a response to throw the attacker off the track.

So far, so good.

But listen to this. If the system deems that more drastic measures are needed, it can move to full-on attack mode itself, including such measure as, and Aunty is quoting here:

“Invasive Techniques - obtaining access privileges on the attacker’s system, and then pursuing a strategy of disabling, destroying, or seizing control over the attacking assets.

Symmetric Counterstrike - sending exploits and other attacks which are specific to vulnerabilities on the attacker’s system, in an amount proportional to their current attacks.

Asymmetric Counterstrike - preemptive measures in response to distributed attacks orchestrated by a known source. This retaliation could be far in excess of the attack that the aggressor has underway.”

There isn’t a measure there which Aunty would consider legally sound, no matter what you think of the ethics or morality of the measures. Even Symbiot itself says that it is “continually evaluating the legal aspects of these more aggressive countermeasures in coordination with law enforcement agencies at various levels. While we believe that our iSIMS attacker profiling, reconnaissance and identification products allow quantified evaluation of attacker identities, we stress that our customers should obtain appropriate advice and information to make decisions that will not violate applicable laws.”

Funny, though, Aunty doesn’t see any customer indemnification warranty anywhere on their site.

Still, it would have been kind of fun to see what would have happened if Graduated Response had met Make Love Not Spam.

You can read more about this at the Symbiot site.