scispace - formally typeset
Journal ArticleDOI

Inside the Slammer worm

TLDR
The Slammer worm spread so quickly that human response was ineffective, and why was it so effective and what new challenges do this new breed of worm pose?
Abstract
The Slammer worm spread so quickly that human response was ineffective. In January 2003, it packed a benign payload, but its disruptive capacity was surprising. Why was it so effective and what new challenges do this new breed of worm pose?.

read more

Citations
More filters
Proceedings ArticleDOI

Effective Detection of Active Worms with Varying Scan Rate

TL;DR: This paper model a new form of active worms called varying scan rate worm (the VSR worm in short), which deliberately varies its scan rate and is able to avoid being effectively detected by existing worm detection schemes.
Patent

Determining cardinality of a parameter using hash values

TL;DR: In this article, a method and system for aggregating configuration information from friend devices is presented, which attempts to foil attacks on the privacy of data contributed to a request by aggregating data from a cluster of friend devices in such a way that it is difficult for a device in the cluster and an attacking device outside the cluster to determine the contribution of an individual device to the data.
Journal ArticleDOI

Industrial control system security taxonomic framework with application to a comprehensive incidents survey

TL;DR: The HTF and the analytical incidents study are carried out to extract the useful patterns and key points for organizing threat intelligence in ICSs and critical infrastructures to improve their security level according to the cyber-attacks trends.
Proceedings ArticleDOI

Abnormal traffic detection and its implementation

TL;DR: This paper discusses traffic analysis method in point of view of network security, and presents abnormal traffic detection method which is based on anomaly analysis, and shows experimental results of the analysis model.
Journal ArticleDOI

Inside the permutation-scanning worms: propagation modeling and analysis

TL;DR: A mathematical model is proposed that precisely characterizes the propagation patterns of the general permutation-scanning worms, a class of worms that are fast yet stealthy, and the impact of dynamic network conditions on the correctness of the model is investigated.
References
More filters
Proceedings Article

Inferring internet denial-of-service activity

TL;DR: This article presents a new technique, called “backscatter analysis,” that provides a conservative estimate of worldwide denial-of-service activity, and believes it is the first to provide quantitative estimates of Internet-wide denial- of- service activity.
Proceedings Article

How to Own the Internet in Your Spare Time

TL;DR: This work develops and evaluates several new, highly virulent possible techniques: hit-list scanning, permutation scanning, self-coordinating scanning, and use of Internet-sized hit-lists (which creates a flash worm).
Proceedings ArticleDOI

Code-Red: a case study on the spread and victims of an internet worm

TL;DR: The experience of the Code-Red worm demonstrates that wide-spread vulnerabilities in Internet hosts can be exploited quickly and dramatically, and that techniques other than host patching are required to mitigate Internet worms.
Proceedings ArticleDOI

Internet quarantine: requirements for containing self-propagating code

TL;DR: The design space of worm containment systems is described using three key parameters - reaction time, containment strategy and deployment scenario - and the lower bounds that any such system must exceed to be useful today are demonstrated.
Journal ArticleDOI

Inferring Internet denial-of-service activity

TL;DR: In this paper, the authors present a new technique, called backscatter analysis, that provides a conservative estimate of worldwide denial-of-service activity, and quantitatively assess the number, duration and focus of attacks, and qualitatively characterize their behavior.