A preliminary simulation of the effect of scanning worm activity on multicast

Proceedings - Workshop on Principles of Advanced and Distributed Simulation, PADS

Volumn , Issue , 2005, Pages 191-198

  Hamadeh, Ihab ^a   Hart, Jason ^a   Kesidis, George ^a   Pothamsetty, Venkat ^b  

^a The Center for Nanotechnology Education and Utilization   (United States)

^b CISCO SYSTEMS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

END-SYSTEMS; NETWORK CONGESTION; SECONDARY RESOURCE-EXHAUSTION EFFECTS;

COMPUTER SIMULATION; CONGESTION CONTROL (COMMUNICATION); INTERNET; MULTICASTING; NETWORK PROTOCOLS; ROUTERS;

COMPUTER WORMS;

EID: 26844502466     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PADS.2005.2     Document Type: Conference Paper

References (27)

1. A. Adams, J. Nicholas, and W. Siadak. Protocol independent multicast-dense mode (PIM-DM): Protocol specification (revised). RFC 3973, January 2005.
2. T. Bates, Y. Rekhter, R. Chandra, and D. Katz. Multiprotocol extensions for BGP-4. RFC 2858, June 2000.
3. V. Berk, G. Bakos, and R. Morris. Designing a framework for active worm detection on global networks. In Proceedings of the IEEE International Workshop of Information Assurance, March 2003.
4. V. Berk, R. S. Gray, and G. Bakos. Using sensor networks and data fusion for early detection of active worms. In Proceedings of the SPIE Aerosense Conference, April 2003.
5. B. Cain, S. Deering, I. Kouvelas, B. Fenner, and A. Thyagarajan. Internet group management protocol, version 3. RFC 3376, October 2002.
6. M. Crane and D. E. Knuth. Cisco CID Exam Certification Guide, chapter 5. Cisco Press, 2001.
7. D. Estrin, D. Farinacci, A. Helmy, D. Thaler, S. Deering, M. Handley, V. Jacobson, C. Liu, P. Sharma, and L. Wei. Protocol independent multicast-sparse mode (pim-sm): Protocol specification. RFC 2362, June 1998.
8. B. Fenner and D. Meyer. Multicast source discovery protocol (msdp). RFC 3618, October 2003.
9. H. Harney and C. Muckenhirn. Group key management protocol (GKMP) architecture. RFC 2094, July 1997.
10. S. Mitra. Iolus: A framework for scalable secure multicasting. In ACM SIGCOMM '97, September 1997.
11. J. Moy. MOSPF: Analysis and experience. RFC 1585, March 1994.
12. Juniper Networks. Pim-ssm. http://www.juniper.net/techpubs/ software/junos/junos60/swconfig60-multicast/html/pim-intro7.html.
13. D. Price and S. Spence. IP multicast on JANET. http://www.ja.net/ documents/tg-IPMulticast.pdf.
14. P. Rajvaidya, K. Ramachandran, and K. Almeroth. Managing and securing the global multicast infrastructure. Journal of Network and Systems Management, September 2004.
15. Symantec Security Response. Linux.ramen.worm. http://securityresponse. symantec.com/avcenter/venc/data/linux.ramen.worm.html, January 2001.
16. Symantec Security Response. W32.sqlexp.worm. http://securityresponse. symantec.com/avcenter/venc/data/w32.sqlexp.worm.html, January 2003.
17. Symantec Security Response. W32.witty.worm. http://securityresponse. symantec.com/avcenter/venc/data/w32.witty.worm.html, March 2004.
18. A. T. Sherman and D. A. McGrew. Key establishment in large dynamic groups using one-way function trees. IEEE Transactions on Software Engineering, 29(5), 2003.
19. S. Stainford. Containment of scanning worms in enterprise networks. 2004.
20. Cisco Systems. Dealing with mallocfail and high CPU utilization resulting from the code red worm. http://www.cisco.com/warp/public/63/ts_codred_worm. shtml, October 2001.
21. G. Travis, E. Balas, D. Ripley, and S. Wallace. Analysis of the SQL slammer worm and its effects on indiana university and related institutions. http://www.anml.iu.edu/downloads/SLAMMER.pdf, March 2004.
22. J. Twycross and M. M. Williamson. Implementing and testing a virus throttle. In Proceedings of the 12th USENIX Security Symposium, August 2003.
23. D. Waitzman, C. Partridge, and S. Deering. Distance vector multicast routing protocol. RFC 1075, November 1988.
24. D. Wallner, E. Harder, and R. Agee. Key management for multicast: Issues and architectures. RFC 2627, June 1999.
25. M. M. Williamson. Throttling viruses: Restricting propagation to defeat mobile malicious code. In Proceedings of the 18th Annual Computer Security Applications Conference, December 2002.
26. C. K. Wong, M. Gouda, and S. S. Lam. Secure group communications using key graphs. IEEE/ACM Transactions on Networking, 8(1), 2000.
27. Wormscout. http://www.forescout.com/wormscout.html.