Software diversity as a defense against viral propagation: Models and simulations

Proceedings - Workshop on Principles of Advanced and Distributed Simulation, PADS

Volumn , Issue , 2005, Pages 247-253

  O'Donnell, Adam J ^a   Sethu, Harish ^a  

^a DREXEL UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EPIDEMIC THRESHOLD; SOFTWARE DIVERSITY; SOFTWARE MONOCULTURE;

ALGORITHMS; COMPUTER SIMULATION; COMPUTER VIRUSES; GRAPH THEORY; MATHEMATICAL MODELS; TOPOLOGY;

COMPUTER SOFTWARE;

EID: 26844504054     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PADS.2005.31     Document Type: Conference Paper

References (24)

1. th ACM Conference on Computer and Communication Security, pages 281-289. ACM Press, 2003.
2. S. Bhatkar, D. C. DuVarney, and R. Sekar. Address obfuscation: An efficient approach to combat a broad range of memory error exploits. In Proc. of the 12th USENIX Security Symposium, pages 105-120, Washington D.C., USA, August 2003.
3. C. Collberg, C. Thomborson, and D. Low. Breaking abstractions and unstructuring data structures. In Proc. of the IEEE International Conference on Computer Languages, pages 28-38, Chicago, IL, May 1998.
4. H. Etoh. GCC extension for protecting applications from stack-smashing attacks, 2004. http://www.trl.ibm.com/projects/security/ssp/.
5. Michalis Faloutsos, Petros Faloutsos, and Christos Faloutsos. On power-law relationships of the internet topology. In Proc. of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, pages 251-262. ACM Press, 1999.
6. S. Forrest, A. Somayaji, and D. Ackley. Building diverse computer systems. In Proc. of the 6th Workshop on Hot Topics in Operating Systems (HotOS-VI), pages 67-72. IEEE Computer Society, 1997.
7. D. Geer. Monopoly considered harmful. IEEE Security & Privacy Magazine, 1(6):14-16, December 2003.
8. D. Geer, R. Bace, P. Gutmann, P. Metzger, C. P. Pfleeger, J. S. Quarterman, and B. Schneier. Cyberinsecurity: The cost of monopoly. Tech report, CCIA, 2003. http://www.ccianet.org/papers/cyberinsecurity.pdf.
9. G. Goth. Addressing the monoculture. IEEE Security & Privacy Magazine, 1(6):8-10, December 2003.
10. J. E. Just and M. Cornwell. Review and analysis of synthetic diversity for breaking monocultures. In Proc. of the 2nd Workshop on Rapid Malcode, Washington, D.C., October 2004.
11. G. S. Kc, A. D. Keromytis, and V. Prevelakis. Countering code-injection attacks with instruction-set randomization. In Proc. of the 10th ACM Conference on Computer and Communication Security, pages 272-280. ACM Press, 2003.
12. J. O. Kephart and S. R. White. Directed-graph epidemiological models of computer viruses. In Proc. of the IEEE Symposium on Security and Privacy, Oakland, CA, May 1991.
13. A. D. Keromytis and V. Prevelakis. Dealing with system monocultures. In Proc. of the NATO IST Panel Symposium on Adaptive Defense in Unclassified Networks, Toulouse, France, April 2004.
14. D. Moore, C. Shannon, G.M. Voelker, and S. Savage. Internet quarantine: Requirements for containing self-propagating code. In IEEE INFOCOM, pages 1901-1910, March-April 2003.
15. A. J. O'Donnell and H. Sethu. On achieving software diversity for improved network security using distributed coloring algorithms. In Proc. of the 11th ACM Conference on Computer and Communications Security, pages 121-131, Washington, B.C., October 2004.
16. R. Pastor-Satorras and A. Vespignani. Epidemic dynamics and endemic states in complex networks. Phys. Rev. E, 63(066117), 2001.
17. R. Pastor-Satorras and A. Vespignani. Immunization of complex networks. Phys. Rev. E, 65(036104), 2002.
18. A. Powell. Internet worms. Tech Report 00727, NISSC, 2003. http://www.niscc.gov.uk/niscc/docs/re-20030805-00727.pdf.
19. M. Stamp. Risks of monoculture. Commun. ACM, 47(3): 120, 2004.
20. C. Wang, J. Davidson, J. Hill, and J. Knight. Protection of software-based survivability mechanisms. In Proc. of the International Conferece on Dependable Systems and Networks, pages 193-202, July 2001.
21. Y. Wang, D. Chakrabarti, C. Wang, and C. Faloutsos. Epidemic spreading in real networks: An eigenvalue viewpoint. In 22nd Symposium on Reliable Distributed Systems. IEEE Computer Society, October 2003.
22. Y. Wang and C. Wang. Modeling the effects of timing parameters on virus propagation. In Proc. of the 2003 ACM Workshop on Rapid Malcode, pages 61-66. ACM Press, 2003.
23. M. M. Williamson. Throttling viruses: Restricting propagation to defeat malicious mobile code. In Proc. of the 18th Annual Computer Security Applications Conference, page 61. IEEE Computer Society, 2002.
24. Y. Zhang, H. Vin, L. Alvisi, W. Lee, and S. K. Dao. Heterogeneous networking: a new survivability paradigm. In Proc. of the 2001 Workshop on New Security Paradigms, pages 33-39. ACM Press, 2001.