The Morris Worm: The Internet's First Wake-Up Call

On November 2, 1988, the internet — then a small network of academic and military computers — experienced its first major security crisis. The Morris Worm, authored by Cornell University graduate student Robert Tappan Morris, began to spread rapidly.

Morris claimed his intention was not to cause damage but to gauge the size of the internet. However, a flaw in the worm's propagation mechanism caused it to infect machines multiple times, leading to a denial-of-service condition that crippled an estimated 10% of the 60,000 computers then connected to the internet.

The incident served as a wake-up call. The cleanup required significant coordination and effort, leading directly to the formation of the first Computer Emergency Response Team (CERT/CC) at Carnegie Mellon University. Morris was convicted under the 1986 Computer Fraud and Abuse Act, making him the first person to be successfully prosecuted under the law. The event marked a turning point, signaling the end of an era of implicit trust on the internet and the beginning of the field of network security as we know it.

Timeline

• 1988-11-02Morris Worm released, infects an estimated 10% of the ~60,000 hosts then on the internet.