Morris worm turns 20: Look what it's done

30.10.2008
The Internet will mark an infamous anniversary on Sunday, when the Morris worm turns 20.

Considered the first major attack on the 'Net, the Morris worm served as a wake-up call to the Internet engineering community about the risk of software bugs, and it set the stage for network security to become a valid area of research and development. (Watch a of the 10 worst moments in network security history.)

"It was a really big deal," says , a computer programmer who in 1981 authored sendmail, open source Internet e-mail software, while he was a student at the University of California at Berkeley. Today, Allman serves as chief science officer at Sendmail, a company that sells commercial-grade versions of the software.

"The biggest implication of the Morris worm was that the Internet was very small ... and it was considered a friendly place, a clubhouse," Allman says. "This [attack] made it clear that there were some people in that clubhouse who didn't have the best interests of the world in mind ... This made it clear we had to think about security."

Despite the high-profile nature of the worm, some experts say its importance was not fully appreciated at the time.

"The really interesting lesson of the Morris Worm is how little long-term impact it had," says Steve Bellovin, a professor in the at Columbia University who was developing an early firewall at Bell Labs when the attack occurred. "It showed people who cared how dangerous buggy software could be, but nobody else really paid that much attention to network security afterwards. It wasn't until the mid-1990s that it became an issue again."