A hybrid quarantine defense

WORM'04 - Proceedings of the 2004 ACM Workshop on Rapid Malcode

Volumn , Issue , 2004, Pages 73-82

  Porras, Phillip ^a   Briesemeister, Linda ^a   Skinner, Keith ^a   Levitt, Karl ^b   Rowe, Jeff ^b   Ting, Yu Cheng Allen ^b  

^a SRI INTERNATIONAL   (United States)

^b University of California   (United States)

Author keywords

Network Modeling and Simulation; Network Security; Worm Detection Systems; Worms

Indexed keywords

ALGORITHMS; COMPUTER SIMULATION; COMPUTER WORMS; INTERNET; NETWORK PROTOCOLS; ROUTERS; TELECOMMUNICATION TRAFFIC;

NETWORK MODELING; NETWORK SECURITY; NETWORK SIMULATION; WORM DETECTION SYSTEMS;

SECURITY OF DATA;

EID: 14944359480     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1029618.1029630     Document Type: Conference Paper

References (18)

1. K. Anagnostakis, M. Greenwald, S. Ioannidis, A. Keromytis, and D. Li, "A Cooperative Immunization System for an Untrusting Internet, " in Proceedings of the 11th IEEE International Conference on Networks (ICON), Sydney, Australia, September 2003.
2. R. Bajcsy and T. Benzel et. al, "Cyber defense technology networking and evaluation," Communications of the ACM, Vol 4, No 3, 2004.
3. L. Briesemeister, P. Lincoln, and P. Porras, "Epidemic Profiles and Defense of Scale-Free Networks," in Proceedings of the ACM Workshop on Rapid Malcode, Washington, DC, October 2003.
4. G. Ganger, G. Economou, and S. Bielski, "Self-Securing Network Interfaces: What, Why, and How," Carnegie Mellon University Technical Report, CMU-CS-02-144, August 2002.
5. S. Gorman, R. Kulkarni, L. Schintler, and R. Stough, "Least Effort Strategies for Cybersecurity," George Mason University, 2003.
6. M. Gualtieri and D. Mosse, "Limiting Worms via QoS Degradation," University of Pittsburgh, 2003.
7. D. Moore, C. Shannon, and J. Brown, "Code Red: A Case Study on the Spread and Victims of an Internet Worm," in Proceedings of the Internet Measures Workshop, Marseille, France, November 2002.
8. D. Moore, C. Shannon, G. Voelker, and S. Savage, "Internet Quarantine: Requirements for Containing Self-Propagating Code," 2003.
9. D. Nicol, "Models of Active Worm Defense," in Proceedings of the Measurement, Modeling and Analysis of the Internet (IMA Workshop'04), Urbana-Champaign, Illinois, January 2004.
10. D. Nojiri, J. Rowe, and K. Levitt, "Cooperative Response Strategies for Large Scale Attack Mitigation," in Proceedings of the 3rd DARPA Information Survivability Conference and Exposition, April 2003.
11. N. Provos, "A Virtual Honeypot Framework, " in Proceedings of the 12th USENIX Security Symposium, San Diego, California, August 2004.
12. S. Staniford, "Containment of Scanning Worms in Enterprise Networks," in Journal of Computer Security, 2003.
13. H. Toyozumi and A. Kara, "Predators: Good Mobile Code Combat against Computer Viruses", New Security Paradigms Workshop, Virginia Beach, Virginia, September 2002.
14. H. Wang, C. Guo, D. Simon, and A. Zugenmaier, "Shield: Vulnerability-Driven Network Filters for Preventing Known Vulnerability Exploits," Microsoft Research, Technical Report MSR-TR-2003-81, February 2004.
15. N. Weaver, Vern Paxon, S. Staniford, and R. Cunningham, "A Taxonomy of Computer Worms," in Proceedings of the Workshop on Rapid Malcode, Washington, DC, October 2003.
16. M. Williamson, "Throttling Viruses: Restricting Propagation to Defeat Malicious Mobile Code," Hewlett Packard, June 2002.
17. C. Wong, C. Wang, D. Song, S. Bielski, G.R. Granger, "Dynamic Quarantine of Internet Worms," in Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004), Florence, Italy, June 2004.
18. C.C. Zou, D. Towsley, and W. Gong, "A Firewall Network System for Worm Defense in Enterprise Networks," University of Massachusetts, Amherst, Technical Report TR-04-CSE-01, February, 2004.