Security Incidents mailing list archives
Code Red Stats
From: Nicholas Bachmann <nbachmann () mail davison k12 mi us>
Date: Wed, 01 Aug 2001 18:51:16 -0400
Hi all-I think I have found a formula to approximate the number of infected hosts. My formula is
([(Number of Infected Hosts * Number CR Queries p/ Day) / Total IPs on the Internet ]^-1) / Average IP Requests p/ Host
So what I would need to know to figure out the approximate number of infected hosts:
*How many IPs CR can check in a day (Number CR Queries p/ Day)*Average Number of times people are checked during a set period, probably 5:00a-5:00p (Average IP Requests p/ Host)
Does anyone see any big flaws in this (I know it isn't perfect) formula that would keep it from being within a reasonable margin of error?
-- Regards, N ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service.For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- code red stats Mark Lastdrager (Aug 01)
- <Possible follow-ups>
- Code Red Stats Nicholas Bachmann (Aug 01)
- Re: Code Red Stats Alex Butcher (Aug 02)