scispace - formally typeset
Journal ArticleDOI

Inside the Slammer worm

TLDR
The Slammer worm spread so quickly that human response was ineffective, and why was it so effective and what new challenges do this new breed of worm pose?
Abstract
The Slammer worm spread so quickly that human response was ineffective. In January 2003, it packed a benign payload, but its disruptive capacity was surprising. Why was it so effective and what new challenges do this new breed of worm pose?.

read more

Citations
More filters
Proceedings ArticleDOI

Routing Worm: A Fast, Selective Attack Worm Based on IP Address Information

TL;DR: This paper presents an advanced worm called "routing worm", which implements two advanced attacking techniques, and uses BGP routing tables to only scan the Internet mutable address space, which allows it propagate three times faster than a traditional worm.
Proceedings ArticleDOI

RIPE: runtime intrusion prevention evaluator

TL;DR: RIPE is presented, an extension of Wilander's and Kamkar's testbed which covers 850 attack forms and provides a standard way of testing the coverage of a defense mechanism against buffer overflows, and shows that the most popular, publicly available countermeasures cannot prevent all of RIPE's buffer overflow attack forms.
Proceedings ArticleDOI

Better bug reporting with better privacy

TL;DR: A solution that provides software vendors with new input values that satisfy the conditions required to make the software follow the same execution path until it fails, but are otherwise unrelated with the original inputs allows them to reproduce bugs while revealing less private information than existing approaches.
Journal ArticleDOI

Priority sampling for estimation of arbitrary subset sums

TL;DR: Priority Sampling as mentioned in this paper is the first weight-sensitive sampling scheme without replacement that works in a streaming context and is suitable for estimating subset sums, and it has been shown to perform an order of magnitude better than previous schemes.
Journal ArticleDOI

Exploiting open functionality in SMS-capable cellular networks

TL;DR: The ability to deny voice service to cities the size of Washington DC and Manhattan with little more than a cable modem is described and attacks targeting the entire United States are feasible with resources available to medium-sized zombie networks.
References
More filters
Proceedings Article

Inferring internet denial-of-service activity

TL;DR: This article presents a new technique, called “backscatter analysis,” that provides a conservative estimate of worldwide denial-of-service activity, and believes it is the first to provide quantitative estimates of Internet-wide denial- of- service activity.
Proceedings Article

How to Own the Internet in Your Spare Time

TL;DR: This work develops and evaluates several new, highly virulent possible techniques: hit-list scanning, permutation scanning, self-coordinating scanning, and use of Internet-sized hit-lists (which creates a flash worm).
Proceedings ArticleDOI

Code-Red: a case study on the spread and victims of an internet worm

TL;DR: The experience of the Code-Red worm demonstrates that wide-spread vulnerabilities in Internet hosts can be exploited quickly and dramatically, and that techniques other than host patching are required to mitigate Internet worms.
Proceedings ArticleDOI

Internet quarantine: requirements for containing self-propagating code

TL;DR: The design space of worm containment systems is described using three key parameters - reaction time, containment strategy and deployment scenario - and the lower bounds that any such system must exceed to be useful today are demonstrated.
Journal ArticleDOI

Inferring Internet denial-of-service activity

TL;DR: In this paper, the authors present a new technique, called backscatter analysis, that provides a conservative estimate of worldwide denial-of-service activity, and quantitatively assess the number, duration and focus of attacks, and qualitatively characterize their behavior.