An analysis by Gadi Evron of Afilias of the background and evolution of the Estonian DDoS attacks in May 2007 is downloadable from Columbia International Affairs Online (CIAO).
Evron considers much of the traffic analysis from the attacks as too unreliable to conclusively point to a smoking gun. However, he notes that a high degree of prior planning and organisation was apparent on community sites. This analysis contributes to a growing picture of spontaneously evolving but highly effective loose confederations of attackers relying entirely on virtual contact. Such a confederation was identified in the case of the Dark OwneD Mafia cracker network, five of whom were recently arrested in Spain. It might indeed explain why only one person has so far been prosecuted in connection with the Estonian attacks.
See also
- Battling Botnets and Online Mobs (PDF), paper by Gadi Evron.
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
