ACT: Attachment chain tracing scheme for email virus detection and control

WORM'04 - Proceedings of the 2004 ACM Workshop on Rapid Malcode

Volumn , Issue , 2004, Pages 11-22

  Xiong, Jintao ^a  

^a UNIVERSIDAD DEL TURABO   (Puerto Rico)

Author keywords

Contact tracing; Transmission chain; Worm defense

Indexed keywords

COMPUTER NETWORKS; COMPUTER WORMS; DNA; ELECTRONIC MAIL; EPIDEMIOLOGY; IMMUNIZATION; MATHEMATICAL MODELS;

ATTACHMENT CHAIN TRACING (ACT); CONTACT TRACING; RESTRICTION FRAGMENT LENGTH POLYMORPHISM (RFLP); TRANSMISSION CHAINS; WORM DEFENSE;

COMPUTER VIRUSES;

EID: 14944372409     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (31)

1. R. Albert and A. Barabasi. topology of evolving network: local events and universality, physical review letters, 85(24):5234-5237, Dec. 2000.
2. CDC. DNA fingerprinting of mycobacterium tuberculosis isolates from epidemiologically linked case pairs.
3. CERT. CERT advisory CA-2004-02.
4. CERT. CERT incident note IN-2003-03.
5. CERT. CERT incident note IN-2004-01.
6. CERT/CC. CERT advisory CA-2001-26 nimda worm.
7. Z. Chen, L. Gao, and K. Kwiat. Modeling the spread of active worms. In Proc. of IEEE INFOCOM'03, San Francisco, CA, April 2003.
8. R. Diel, S. Schneider, K. Meywald, C. Ruf, S. Rusch, and S. Niemann, epidemiology of tuberculosis in hamburg, Germany: long-term population-based analysis applying classical and molecular epidemiological techniques. J. of Clinical Microbiology, 40(2):532-539, Feb. 2002.
9. M. Garetto, W. Gong, and D. Towsley. modeling malware spreading dynamics. In IEEE INFOCOM'03, San Francisco, CA, April 2003.
10. W. Haas, G. Engelmann, B. Amthor, S. Shyamba, F. Mugala, M. Felten, M. Rabbow, M. Leichsenring, O. Oosthuizen, and H. Bremer, transmission dynamics of tuberculosis in a high-incidence country: prospective analysis by PCR DNA fingerprinting. J. of Clinical Microbiology, 37(12):3975-3979, Dec. 1999.
11. H. Hethcote. The mathematics of infectious diseases. SIAM review, 42(4):599-653, Oct. 2000.
12. K. Swab. SMTP gateway virus filtering with sendmail and AMaViS.
13. J. Kephart and S. White, directed-graph epidemiological models of computer viruses. In Proc. of the 1991 IEEE computer society symposium on research in security and privacy, pages 343-359, May 1991.
14. J. Kephart and S. White, measuring and modeling computer virus prevalence. In Proc. of 1993 IEEE computer society symposium on research in security and privacy, pages 2-15, may 1993.
15. S. Lockman, J. Sheppard, C. Braden, M. Mwasekaga, C. Woodley, T. Kenyon, N. Binkin, M. Steinman, F. Montsho, M. Kesupile, C. Hirschfeldt, M. Notha, T. Moeti, and J. Tappero. Molecular and conventional epidemiology of mycobacterium tuberculosis in Boswana: a population-based prospective study of 301 pulmonary tuberculosis patients. J. of Clinical Microbiology, 39(3): 1042-1047, May 2001.
16. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. Inside the slammer worm. IEEE security and privacy, 1(4):33-39, July 2003.
17. D. Moore and C. Shannon. Code-Red: a case study on the spread and victims of an internet worm. In Proc. 2002 ACM SIGCOMM Internet Measurement Workshop, pages 273-284, Marseille, France, November 2002.
18. D. Moore, C. Shannon, G. Voelker, and S. Savage. Internet quarantine: Requirements for containing self-propagating code. In Proc. IEEE INFOCOM'03, San Francisco, CA, April 2003.
19. D. Soolingen. molecular epidemiology of tuberculosis and other mycobacterial infections: main methodologies and achievements. J. Intern. Med., (249):1-26, 2000.
20. S. Staniford, V. Paxson, and N. Weaver, how to own the internet in your spare time. In Proc. of the 11th USENIX security symposium, San Francisco, CA, aug. 2002.
21. T. Toth and C. Kruegel. Connection-history based anomaly detection. In Proc. of the IEEE workshop on information assurance and security, West Point, NY, June 2002.
22. C. Wang, J. Knight, and M. Elder. On computer viral infection and the effect of immunization. In Proc. of the 16th annual computer security applications conference (ACSAC'00), New Orleans, LA, Dec. 2000.
23. H. Wang, C. Guo, D. Simon, and A. Zugenmaier. Shield: Vulnerability-driven network filters for preventing known vulnerability exploits. In ACM Sigcomm'04, Portland, OR, Aug. 30 - Sep. 3 2004.
24. WHO. consensus document on the epidemiology of severe acute respiratory syndrome (SARS).
25. WHO. SARS: breaking the chains of transmission.
26. M. Williamson. Throttling viruses: restricting propagation to defeat malicious mobile code. Technical Report HPL-2002-172, HP laboratories technical report, 2002.
27. Y. Zhu, J. Ho, and L. Beauchamp. Email traffic modeling at the access link. Technical report, Nortel networks technical report, 1998.
28. C. Zou, L. Gao, W. Gong, and D. Towsley. Monitoring and early warning for internet worms. In Proc. of th 10th ACM symposium on computer and communication security, Washington DC, October 2003.
29. C. Zou, W. Gong, and D. Towsley. Code red worm propagation modeling and analysis. In Proc. 9th ACM symposium on computer and communication security, pages 138-147, Washington DC, Oct. 2002.
30. C. Zou, W. Gong, and D. Towsley. Worm propagation modeling and analysis under dynamic quarantine defense. In ACM WORM'03, Washington DC, Oct. 2003.
31. C. Zou, D. Towsley, and W. Gong. Email virus propagation modeling and analysis. Technical Report TR-CSE-03-04, University of Massachusetts at Amherst, 2003.