A survey and trends on Internet worms

Computers and Security

Volumn 24, Issue 4, 2005, Pages 334-346

  Qing, Sihan ^a,b,c   Wen, Weiping ^a,b,c  

^a INSTITUTE OF SOFTWARE   (China)

^b INSTITUTE OF GEOLOGY AND GEOPHYSICS   (China)

^c UNIVERSITY OF CHINESE ACADEMY OF SCIENCES   (China)

Author keywords

Internet worms; Network security; Propagation model; Scanning strategies

Indexed keywords

COMPUTER NETWORKS; COMPUTER SYSTEMS; COMPUTER VIRUSES; MATHEMATICAL MODELS; PROBLEM SOLVING; SECURITY OF DATA;

INTERNET WORMS; NETWORK SECURITY; PROPAGATION MODELS; SCANNING STRATEGIES;

INTERNET;

EID: 19944374456     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.10.001     Document Type: Article

References (69)

1. L.J. Allen, and A.M. Burgin Comparison of deterministic and stochastic SIS and SIR models in discrete time Mathematical Biosciences 163 2000 1 33
2. G. Allen, D. Angulo, and I. Foster The cactus worm: experiments with dynamic resource discovery and allocation in a grid environment
3. R.M. Anderson, and R.M. May Infectious diseases of humans: dynamics and control 1991 Oxford University Press Oxford
4. H. Andersson, and T. Britton Stochastic epidemic models and their statistical analysis 2000 Springer-Verlag New York
5. Arnold B, Chess D, Morar J, Segal A, Swimmer M. An environment for controlled worm replication and analysis. Published at the Virus Bulletin; September 2000. p. 1-20.
6. N.T. Bailey The mathematical theory of infectious diseases and its applications 1975 Hafner Press New York
7. Balasubramaniyan JS, Garcia-Fernandez JO, Isacoff D, Spafford E, Zamboni D. An architecture for intrusion detection using autonomous agents. Technical Report 98/05, Purdue University; 1998.
8. B. Barber Cheese worm: pros and cons of a friendly worm
9. CAIDA IPv4 BGP geopolitical analysis
10. CERT Code Red II: another worm exploiting buffer overflow in IIS indexing service DLL 2001
11. CERT/CC CERT Advisory CA-2001-26 Nimda worm
12. ® Incident Note IN-2001-05
13. Z. Chen, L. Gao, and K. Kwiat Modeling the spread of active worms IEEE INFOCOM 2003 April 2003 IEEE
14. Cheung S, Hoagland J, Levitt K, Rowe J, Staniford C, Yip R, et al. The design of GrIDS: a graph-based intrusion detection system. Technical report CSE-99-2. U.C. Davis Computer Science Department
15. Cohen F. Computer viruses. Ph.D. thesis, University of Southern California; 1985. p. 1-5.
16. Cohen F. Computer viruses - theory and experiments. In: DOD/NBS 7th conference on computer security, originally appearing in IFIP-sec 84
17. [also appearing in Computers and Security 1987;6:22-35]
18. Computer Emergency Response Team (CERT)
19. EEye Digital Security Blaster worm analysis
20. EEye Digital Security Code Red worm
21. Ellis D. A potency relation for worms and next-generation attack tools. MITRE Technical report; 12 March 2002.
22. M. Fearnow, and W. Stearns Adore worm April 2001
23. J.C. Frauenthal Mathematical modeling in epidemiology 1980 Springer-Verlag New York
24. Fyodor The Art of port scanning Phrack Magazine 7 51 September 1997 11 17
25. W.D. George, T.K. Samuel, C. Sukru, B. Murtaza, and M.C. Peter ReVirt: Enabling intrusion analysis through virtual-machine logging and replay Proceedings of the 2002 symposium on operating systems design and implementation December 2002
26. Global Slapper Worm Information Center
27. H. HexXer CodeGreen source code
28. Honeypot technology
29. Internet protocol V4 address space
30. A. Kasarda The Lion worm: king of the jungle?
31. J.O. Kephart, and S.R. White Measuring and modeling computer virus prevalence Proceedings of the IEEE symposimum on security and privacy 1993 2 15
32. J.O. Kephart, D.M. Chess, and S.R. White Computers and epidemiology IEEE Spectrum 30 5 1993 20 26
33. M. Kern CRClean source code
34. D.M. Kienzle, and M.C. Elder Recent worms: a survey and trends WORM'03 October 2003
35. T. Liston Welcome to my tarpit - the tactical and strategic use of LaBrea
36. J.W. Lockwood, N. Naufel, J.S. Turner, and D.E. Taylor Reprogrammable network packet processing on the Field Programmable Port Extender (FPX) ACM international symposium on field programmable gate arrays (FPGA) February 2001 87 93 Monterey, CA, USA
37. Lockwood JW, Moscola J, Kulig M, Reddick D. Tim Brooks. Internet worm and virus protection in dynamically reconfigurable hardware. Military and Aerospace Programmable Logic Device (MAPLD), Washington DC; 2003. Paper E10, September 9-11, 2003.
38. A. Mackie, J. Roculan, R. Russell, and M.V. Velzen Nimda worm analysis
39. D. Moore, C. Shannon, and K. Claffy Code Red: a case study on the spread and victims of an Internet worm Proceeding Internet measurement workshop November 2002 273 284
40. D. Moore, C. Shannon, G. Voelker, and S. Savage Internet quarantine: requirements for containing self-propagating code Proceedings of the 2003 IEEE Infocom conference April 2003 San Francisco, CA
41. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver Inside the slammer worm IEEE Magazine of Security and Privacy July/August 2003 33 39
42. J. Nazario, J. Anderson, R. Wash, and C. Connelly The future of Internet worms Presented at the Blackhat Briefings July 2001
43. L. Oudot Fighting worms with Honeypots:Honeyd vs Msblast.exe Honeypots mailinglist August 2003
44. P.A. Porras, and P.G. Neumann Emerald: event monitoring enabling responses to anomalous live disturbances Proceedings of the 20th national information systems security conference October 1997 353 365
45. Provos N. A virtual Honeypot framework. CITI Technical report 03-1
46. S.E. Schechter, and M.D. Smith Access For Sale: a new class of worm Proceedings of the 2003 ACM workshop on Rapid Malcode 2003 138 147 Washington, DC
47. Shoch, F. John, and A.H. Jon The worm programs early experience with a distributed computation Communications of the ACM 25 3 1982 172 180
48. Song D, Malan R, Stone R. A snapshot of global Internet worm activity. Arbor Networks, Technical report; November 2001
49. Spafford EH. The Internet worm program: an analysis. Technical report CSD-TR-823, Department of Computer Science, Purdue University; 1988. p. 1-29.
50. L. Spitzner Honeypots: tracking hackers September 2002 Addison Wesley Professional
51. S Staniford, D Ellis, and N Weaver The worm information center
52. S. Staniford, V. Paxson, and N. Weaver How to own the Internet in your spare time 11th Usenix security symposium August 2002 San Francisco
53. W. Steve Open problems in computer virus research October 1998
54. R. Thomas Bogon list v1.5 August 2002
55. T. Vogt Simulating and optimizing worm propagation algorithms September 2003
56. N. Weaver Warhol worms: the potential for very fast Internet plagues
57. N. Weaver Potential strategies for high speed active worms March 2002
58. N. Weaver, V. Paxson, S. Staniford, and R. Cunningham Large scale malicious code: a research agenda 2003 p. 11-16
59. S Yang, and M Relations NSF awards $5.46 million to UC Berkeley and USC to build test bed for cyber war games
60. Zheng H. Internet worm research [for the degree of PhD]. Information Technologies & Science College, Nankai University, Tianjin, P.R. China; 2003. p. 12-15.
61. X.D. Zuo, and Y.X. Dai Analysis on Lion worm and some discussing about it Computer Engineering 28 1 2002 16 17
62. C.C. Zou, W. Gong, and D. Towsley Code Red worm propagation modeling and analysis 9th ACM Symposium on computer and communication security 2002 Washington, DC
63. Zou CC, Gong W, Towsley D. On the performance of Internet worm scanning strategies. Mass ECE Technical report TR-03-CSE-07; November 2003.
64. Zou CC, Towsley D, Gong W, Cai S. Routing worm: a fast, selective attack worm based on IP address information. Umass ECE Technical report TR-03-CSE-06; November 2003.
65. Zou CC, Gao L, Gong W, Towsley D. Monitoring and early warning for Internet worms. Umass ECE Technical report TR-CSE-03-01; 2003.