Modeling and automated containment of worms

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2005, Pages 528-537

  Sellke, Sarah ^a   Shroff, Ness B ^a   Bagchi, Saurabh ^a  

^a Purdue University   (United States)

Author keywords

Automatic worm containment; Branching process model; Early phase propagation; Internet scanning worms; Stochastic worm modeling

Indexed keywords

AUTOMATED CONTAINMENT; BRANCHING PROCESS MODEL; MODELING; SELF-PROPAGATING CODES;

CODES (SYMBOLS); COMPUTER SIMULATION; INTERNET; PROBABILITY; SECURITY OF DATA; STRATEGIC PLANNING;

COMPUTER WORMS;

EID: 27544467181     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2005.66     Document Type: Conference Paper

References (25)

1. CAIDA, "CAIDA Analysis of Code-Red," http://www.caida.org/ analysis/security/code-red/.
2. USA Today News, "The Cost of Code Red: $1.2 billion," http://www.usatoday.com/tech/news/2001-08-01-code-red-costs.htm.
3. Z. Chen, L. Gao, and K. Kwiat, "Modeling the Spread of Active Worms," IEEE INFOCOMM, 2003.
4. P. C. Consul, "Generalized Poisson Distributions, Properties and Applications," STATISTICS: textboods and monographs, vol 99, Marcel Dekker, Inc.
5. D. J. Daley and J. Gani, "Epidemic Modelling, An Introduction," Cambridge University Press, 1999.
6. S. Karlin and H. M. Taylor, "A First Course in Stochastic Processes, Second Edition," Academic Press, 1975.
7. J.O. Kephart and S. R. White, "Directed-graph Epidemiological Models of Computer Viruses," Proceedings of the IEEE Symposium on Security and Privacy, 1991.
8. J.O. Kephart D. M. Chess and S. R. White, "Computers and Epidemiology," IEEE Spectrum, 1993.
9. J.O. Kephart and S. R. White, "Measuring and Modeling Computer Virus Prevalence," Proceedings of the IEEE Symposium on Security and Privacy, 1993.
10. M. Liljenstam, D. M. Nicol, V. H. Berk, and R. S. Gray, "Simulating Realistic Network Worm Traffic for Worm Warning System Design and Testing," WORM'03, pp.24-33, Oct. 2003.
11. D. Moore, C. Shannon, and J. Brown, "Code-Red: A Case Study on The Spread and Victims of an Internet Worm," Proc. 2nd ACM Inlernet Measurement Workshop, ACM Press, 2002.
12. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver, "Inside the Slammer Worm," IEEE Security and Privacy, 1(4):33-39, July 2003.
13. D. Moore, C. Shannon, G. M. Voelker and S. Savage, "Internet Quarantine: Requirements for Containing Self-Propagating Code," Proc. INFOCOM 2003.
14. S. Ross "Stochastic Processes, 2nd edition" John Wiley & Sons, Inc, 1996.
15. S. Staniford, V. Paxson, and N. Weaver, "How to Own the Internet in Your Spare Time," Proc. 11th USENIX Security Symposium (SEC 02), Usenix Assoc., 2002, pp. 149-167.
16. S. Staniford, "Containment of Scanning Worms in Enterprise Networks," Journal of Computer Security, to appear
17. M. M. Williamson "Throttling Viruses: Restricting Propagation to Defeat Malicious Mobile Code," Proceedings of ACSAC Security Conference, 2002.
18. C. Wong, C. Wang, D. Song, S. Bielski, G. R.Ganger "Dynamic Quarantine of Internet Worms," The International Conference on Dependable Systems and Networks (DSN-2004), 2004.
19. C. C. Zou, W. Gong and D. Towsley, "Code Red Worm Propagation Modeling and Analysis," In 9th ACM Symposium on Computer and Communication Security, pp. 138-147, 2002.
20. C. C. Zou, L. Gao, W. Gong and D. Towsley, "Monitoring and Early Warning for Internet Worms," In 10th ACM Symposium on Computer and Communication Security, pp. 190-199, 2003.
21. C. C. Zou, W. Gong, and D. Towsley, "Worm Propagation Modeling and Analysis under Dynamic Quarantine Defense," WORM'03, pp. 51-60, 2003.
22. Computer Economics "2001 Economic Impact of Malicious Code Attacks," http://www.computereconomics.com/cei/press/pr92101.html.
23. Vincent H. Berk, Robert S. Gray, and George Bakos, "Using Sensor Networks and Data Fusion for Early Detection of Active Worms," In Proceedings of AeroSense 2003: SPIE's 17th Annual International Symposium on Aerospace/Defense Sensing, Simulation, and Controls, Orlando, Florida, April 2003.
24. LBUCONN-7 "Thirty Days' Wide-Area TCP Connections," http//ita.ee.lbl.gov/html/contrib/LBL-CONN-7.html.
25. H. W. Hethcote, "The Mathematics of Infectious Diseases," In SIAM Review, vol. 42, no. 4, pp. 599-653, 2000.