Collaborative internet worm containment

IEEE Security and Privacy

Volumn 3, Issue 3, 2005, Pages 25-33

  Cai, Min ^a   Hwang, Kai ^a,b   Kwok, Yu Kwong ^a,c   Song, Shanshan ^a,b   Chen, Yu ^a,d  

^a UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

^b Div of Biokinesiology and Physical Therapy   (United States)

^c UNIVERSITY OF HONG KONG   (Hong Kong)

^d NONE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DISTRIBUTED HASH TABLES (DHT); OVERLAY NETWORKS; PEER TO PEER NETWORKS; REAL-LIFE INTERNET ENVIRONMENTS;

CORRELATION METHODS; INFORMATION DISSEMINATION; INTERNET; LOCAL AREA NETWORKS; SECURITY OF DATA; WIDE AREA NETWORKS;

COMPUTER WORMS;

EID: 20844436808     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2005.63     Document Type: Review

References (16)

1. S. Savage, "Internet Outbreaks: Epidemiology and Defenses," Keynote Address, Internet Society Symp. Network and Distributed System Security (NDSS 05), 2005; www.cs.ucsd.edu/~savage/papers/InternetOut break.NDSS05.pdf.
2. A. Chakrabarti and G. Manimaran, "Internet Infrastructure Security: A Taxonomy," IEEE Network, Nov. 2002, pp. 13-21.
3. I. Stoica et al., "A Scalable Peer-to-Peer Lookup Protocol for Internet Applications," IEEE/ACM Trans. Networking, vol. 11, no. 1, 2003, pp. 17-32.
4. A.D. Keromytis, V. Misra, and D. Rubenstein, "SOS: Secure Overlay Services," Proc. ACM SIGCOMM, ACM Press, 2002, pp. 61-72.
5. J. Li, P. Reiher, and G. Popek, "Resilient Self-Organizing Overlay Networks for Security Update Delivery," IEEE J. Selected Areas in Comm.,Jan. 2004, pp. 189-202.
6. K. Hwang, Y. Chen, and H. Liu, "Defending Distributed Systems against Malicious Intrusions and Network Anomalies," Proc. IEEE Workshop Security in Systems and Networks (SSN 05), IEEE CS Press, 2005, pp. 286-286.
7. D. Moore et al., "Internet Quarantine: Requirements for Containing Self-Propagating Codes," Proc. IEEE INFOCOM, IEEE CS Press, 2003, pp. 1901-1910.
8. M. Cai et al., "WormShield: Collaborative Worm Signature Detection Using Distributed Aggregation Trees," tech. report TR 2005-10, Internet and Grid Computing Lab, Univ. of Southern California, 2005; http://grid sec.usc.edu/TR/TR-2005-10.pdf.
9. M. Cai et al., "Fast and Accurate Traffic Matrix Measurement Using Adaptive Cardinality Counting," tech. report TR 2005-12, Internet and Grid Computing Lab, Univ. of Southern California, 2005; http://gridsec.usc.edu/TR/TR- 2005-12.pdf.
10. V. Yegneswaran, P. Barford, and S. Jha, "Global Intrusion Detection in the Domino Overlay System," Proc. Network and Distributed System Security (NDSS 04), Internet Soc., 2004, pp. 79-95.
11. . S. Staniford et al., "The Top Speed of Flash Worms," Proc. Workshop on Rapid Malcode (WORM 04), ACM Press, 2004, pp. 33-42.
12. M.O. Rabin, "Fingerprinting by Random Polynomials," tech. report 15-81, Center for Research in Computing Technology, Harvard Univ., 1981.
13. H.A. Kim and B. Karp, "Autograph: Toward Automated Distributed Worm Signature Detection," Proc. Usenix Security Symp., Usenix Assoc., 2004, pp. 271-286.
14. M. Durand and P. Flajolet, "LogLog Counting of Large Cardinalities," Proc. European Sytnp. Algorithms, LNCS 2832, Springer-Verlag, 2003. pp. 605-617.
15. Y. Zhang et al., "Fast Accurate Computation of Large-scale IP Traffic Matrices from Link Loads," Proc. SIGCOMM, ACM Press, 2003, pp. 301-312.
16. A. Lakhina, M. Crovella, and C. Diot, "Characterization of Network-Wide Anomalies in Traffic Flows," Proc. ACM/SIGCOMM Internet Measurement Conf., ACM Press, 2004, pp. 201-206.