Code-Red: A case study on the spread and victims of an Internet worm

Proceedings of the 2nd Internet Measurement Workshop (IMW 2002)

Volumn , Issue , 2002, Pages 273-284

  Moore, David ^a   Shannon, Colleen ^a   Claffy, K ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Backscatter; Code Red; Code RedI; CodeRedI; CodeRedII; Epidemiology; Security; Virus; Worm

Indexed keywords

BACKSCATTERING; COMPUTER VIRUSES; DATA REDUCTION; EPIDEMIOLOGY; GEOGRAPHICAL REGIONS; INFORMATION USE; INTERNET; NETWORK PROTOCOLS; SECURITY SYSTEMS;

DEACTIVATION RATES;

COMPUTER WORMS;

EID: 0141762461     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. E. Spafford, "The internet worm: Crisis and aftermath," 1989.
2. Charles Schmidt and Tom Darby, "The Morris Internet Worm," Tech. Rep., http://www.software.com.pl/newarchive/misc/Worm/darbyt/pages/history.html.
3. John Shoch and Jon Hupp, "The 'Worm' Programs - Early Experience with a Distributed Computation," Communications of the ACM, vol. 25, no. 3, pp. 172-180, Mar. 1982.
4. CERT Coordination Center, "CERT Advisory CA-1989-04 WANK Worm On SPAN Network," http://www.cert.org/advisories/CA-1989-04.html
5. Max Vision, "Ramen Internet Worm Analysis," http://www.whitehats.com/library/worms/ramen/.
6. SANS Global Incident Analysis Center, "Lion Worm," http://www.sans.org/y2k/lion.htm.
7. Computer Economics, "2001 economic impact of malicious code attacks," http://www.computereconomics.com/cei/press/pr92101.html.
8. eEye Digital Security, "Advisories and Alerts: AD20010618," http://www.eeye.com/html/Research/Advisories/AD20010618.html.
9. Microsoft, "A Very Real and Present Threat to the Internet," http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ topics/codealrt.asp.
10. eEye Digital Security, "Advisories and Alerts: .ida "Code Red" Worm," July 2001, http://www.eeye.com/html/Research/Advisories/AL20010717.html.
11. Silicon Defense, "Code Red Analysis page," http://www.silicondefense.com/cr/.
12. Cisco Systems, Inc, "Cisco Security Advisory: "Code Red" Worm - Customer Impact," http://www.cisco.com/warp/public/707/cisco-code-red-worm-pub.shtml.
13. eEye Digital Security, "CodeRedII Worm Analysis," August 2001, http://www.eeye.com/html/Research/Advisories/AL20010804.html.
14. SecurityFocus, "SecurityFocus Code Red II Information Headquarters," http://aris.securityfocus.com/alerts/codered2/.
15. "Cisco NetFlow," http://www.cisco.com/warp/public/732/netflow/.
16. Vern Paxson, "Bro: A System for Detecting Network Intruders in Real-Time," Computer Networks, vol. 31, no. 23-24, pp. 2435-2463, 1999.
17. eEye Digital Security, "eEye Code Red analysis, commented disassembly, full IDA database, and binary of the worm," http://www.eeye.com/html/advisories/codered.zip.
18. Ixiacom IxMapping, "Ixmapping," http://www.ipmapper.com.
19. David Moore, Geoffrey M. Voelker, and Stefan Savage, "Inferring Internet Denial-of-Service Activity," Usenix Security Symposium, 2001.
20. Dug Song and Rob Malan and Robert Stone, "A Snapshot of Global Internet Worm Activity," http://research.arbor.net/up_media/up_files/snapshot_worm_activity_f.ps.
21. Netsizer, "Evaluating the size of the internet," http://www.netsizer.com.