scispace - formally typeset
Journal ArticleDOI

Inside the Slammer worm

TLDR
The Slammer worm spread so quickly that human response was ineffective, and why was it so effective and what new challenges do this new breed of worm pose?
Abstract
The Slammer worm spread so quickly that human response was ineffective. In January 2003, it packed a benign payload, but its disruptive capacity was surprising. Why was it so effective and what new challenges do this new breed of worm pose?.

read more

Citations
More filters
Proceedings ArticleDOI

Network externalities and the deployment of security features and protocols in the internet

TL;DR: It is shown that the impact of network externalities on the adoptability and deployment of security features and protocols in the Internet can be explicitly identified, and both the economic and network properties that determine the adoption of security technologies are identified.
Proceedings ArticleDOI

Epidemiological Modelling of Peer-to-Peer Viruses and Pollution

TL;DR: Deterministic epidemiological models for the propagation of a P1P virus through a P2P network and the dissemination of pollution are derived and how the models may be used to estimate in a computationally efficient manner how effective object reputation schemes will be in mitigating the impact of viruses and preventing the spread of pollution is illustrated.
Proceedings ArticleDOI

Botzilla: detecting the "phoning home" of malicious software

TL;DR: Botzilla is introduced, a method for detection of malware communication, which proceeds by repetitively recording network traffic of malware in a controlled environment and generating network signatures from invariant content patterns, demonstrating the ability of Botzilla to accurately identify malware communication in network traffic with very low false-positive rates.
Journal ArticleDOI

On the Survivability of Wireless Ad Hoc Networks with Node Misbehaviors and Failures

TL;DR: A novel semi-Markov process model is proposed to characterize the evolution of node behaviors and the effects of node misbehaviors on both topological survivability and network performance and is validated by simulations and numerical analysis.
Journal ArticleDOI

Fast detection and visualization of network attacks on parallel coordinates

TL;DR: From the observation that each attack type of significance forms a unique pattern, the PCAV program develops nine signatures and their detection mechanism based on an efficient hashing algorithm and can quickly detect new attacks and enable network administrators to intuitively recognize and respond to the attacks.
References
More filters
Proceedings Article

Inferring internet denial-of-service activity

TL;DR: This article presents a new technique, called “backscatter analysis,” that provides a conservative estimate of worldwide denial-of-service activity, and believes it is the first to provide quantitative estimates of Internet-wide denial- of- service activity.
Proceedings Article

How to Own the Internet in Your Spare Time

TL;DR: This work develops and evaluates several new, highly virulent possible techniques: hit-list scanning, permutation scanning, self-coordinating scanning, and use of Internet-sized hit-lists (which creates a flash worm).
Proceedings ArticleDOI

Code-Red: a case study on the spread and victims of an internet worm

TL;DR: The experience of the Code-Red worm demonstrates that wide-spread vulnerabilities in Internet hosts can be exploited quickly and dramatically, and that techniques other than host patching are required to mitigate Internet worms.
Proceedings ArticleDOI

Internet quarantine: requirements for containing self-propagating code

TL;DR: The design space of worm containment systems is described using three key parameters - reaction time, containment strategy and deployment scenario - and the lower bounds that any such system must exceed to be useful today are demonstrated.
Journal ArticleDOI

Inferring Internet denial-of-service activity

TL;DR: In this paper, the authors present a new technique, called backscatter analysis, that provides a conservative estimate of worldwide denial-of-service activity, and quantitatively assess the number, duration and focus of attacks, and qualitatively characterize their behavior.