Access for sale: A new class of worm

WORM'03 - Proceedings of the 2003 ACM Workshop on Rapid Malcode

Volumn , Issue , 2003, Pages 19-23

  Schechter, Stuart E ^a   Smith, Michael D ^a  

^a HARVARD UNIVERSITY   (United States)

Author keywords

Cryptography; Economics; Incentives; Security; Threat Modelling; Virus; Worm

Indexed keywords

INCENTIVES; INFECTED SYSTEMS; THREAT MODELLINGS; UNIQUE SYSTEM IDENTIFIER (USID);

COMPUTER OPERATING SYSTEMS; COMPUTER SOFTWARE; COMPUTER SYSTEM FIREWALLS; COMPUTER VIRUSES; CRYPTOGRAPHY; ECONOMICS; MATHEMATICAL MODELS; NETWORK PROTOCOLS; RISK MANAGEMENT; SECURITY OF DATA;

COMPUTER WORMS;

EID: 10444238850     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. CodeRed II. http://securityresponse.symantec. com/avcenter/venc/data/codered.ii.html.
2. Tim Dierks and Christopher Allen. RFC 2246: The TLS protocol version 1. http://www.ietf.org/rfc/rfc2246.txt, January 1999.
3. John Giffin, Rachel Greenstadt, Peter Litwack, and Richard Tibbetts. Covert messaging through TCP timestamps. In Proceedings of the Privacy Enhancing Technologies Workshop (PET 2002), pages 194-208, April 2002.
4. Butler W. Lampson. A note on the confinement problem. Communications of the ACM, 16(10):613-615, 1973.
5. David Moore, Vern Paxson, Stefan Savage, Colleen Shannon, Stuart Staniford, and Nicholas Weaver. Inside the Slammer worm. IEEE Security and Privacy.
6. Eric Rescorla. Security holes... who cares? In Proceedings of the 12th USENIX Security Symposium, August 6-8, 2003.
7. Craig H. Rowland. Covert channels in the TCP/IP protocol suite. First Monday, 2(5), May 5, 1997.
8. Stuart E. Schechter and Michael D. Smith. How much security is enough to stop a thief? The economics of outsider theft via computer systems and networks. In Proceedings of the Seventh Financial Cryptography Conference, January 27-30, 2003.
9. Stuart Staniford, Vern Paxson, and Nicholas Weaver. How to Own the Internet in your spare time. In Proceedings of the 11th USENIX Security Symposium, August 7-9, 2002.
10. Tanatos.a (bugbear.a). http://www.viruslibrary.com/virusinfo/I-Worm. Tanatos.a(akaBugBear.a).htm.
11. Tanatos.b (bugbear.b). http://www.viruslibrary.com/virusinfo/I-Worm. Tanatos.b(akaBugBear.b).htm.
12. Ken Thompson. Reflections on trusting trust. Communication of the ACM, 27(8):761-763, August 1984.
13. Adam Young and Moti Yung. Cryptovirology: Extortion-based security threats and countermeasures. In Proceedings of the IEEE Symposium on Security and Privacy, pages 129-140, May 6-8, 1996.
14. Adam Young and Moti Yung. Deniable password snatching: On the possibility of evasive electronic espionage. In Proceedings of the 18th IEEE Computer Society Symposium on Security and Privacy, pages 224-235, May 4-7, 1997.