A self-learning worm using importance scanning

WORM'05 - Proceedings of the 2005 ACM Workshop on Rapid Malcode

Volumn , Issue , 2005, Pages 22-29

  Chen, Zesheng ^a   Ji, Chuanyi ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Importance scanning; Modeling; Self learning worm; Worm propagation

Indexed keywords

INFORMATION ANALYSIS; LEARNING SYSTEMS; MATHEMATICAL MODELS; PARAMETER ESTIMATION;

IMPORTANCE SCANNING; MODELING; SELF-LEARNING WORM; WORM PROPAGATION;

COMPUTER VIRUSES;

EID: 31844443075     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1103626.1103632     Document Type: Conference Paper

References (26)

1. P. J. Bickel and K. A. Doksum, "Mathematical Statistics: Basic Ideas and Selected Topics, Vol I (2nd Edition)," Prentice Hall, 2001.
2. Z. Chen and C. Ji, "Importance-Scanning Worm Using Vulnerable-Host Distribution," to appear in IEEE GLOBECOM 2005.
3. Z. Chen, L. Gao, and K. Kwiat, "Modeling the Spread of Active Worms," in Proc. of INFOCOM 2009, San Francisco, April, 2003.
4. E. Cooke, F. Jahanian, and D. McPherson, "The Zombie Roundup: Understanding, Detecting, and Disrupting Botnets," Proc. of Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI'05), Boston, 2005.
5. A. Doucet, N. de Freitas, and N. Gordon, "Sequential Monte Carlo Methods in Practice," New York: Springer.
6. H. Feng, A. Kamra, V. Misra, and A. D. Keromytis, "The Effect of DNS Delays on Worm Propagation in an IPv6 Internet," in Proc. of INFOCOM 2005, March 2005.
7. P. Heidelberger, "Fast Simulation of Rare Events in Queueing and Reliability Models," ACM Transactions on Modeling and Computer Simulation, vol.5, no.1 pp. 43-85, Jan. 1995.
8. M. Locasto, J. Parekh, S. Stolfo, A. Keromytis, T. Malkin, and V. Misra, "Collaborative Distributed Intrusion Detection," CU Tech Report CUCS-012-04, 2004.
9. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver, "Inside the Slammer Worm,", IEEE Security and Privacy, 1(4):33-39, July 2003.
10. D. Moore, C. Shannon, and J. Brown, "Code-Red: a case study on the spread and victims of an Internet worm," ACM SIGCOMM/USENIX Internet Measurement Workshop, Marseille, France, Nov 2002.
11. D. Moore, C. Shannon, G. Voelker, and S. Savage, "Internet Quarantine: Requirements for Containing Self-Propagating Code,", in Proc. of INFOCOM 2003, San Francisco, April, 2003.
12. G. Owen, "Game Theory," Academic Press, New York.
13. R. Puri, "Bots & Botnet: An Overview," SANS Institute 2003.
14. M. Abu Rajab, F. Monrose, and A. Terzis, "On the Effectiveness of Distributed Worm Monitoring," to appear in Usenix Security 2005.
15. S. Ross, "Introduction to Probability Models," 7th edition, New York: Academic Press, 2000.
16. S. Saroiu, P. K. Gummadi, and S. D. Gribble, "A Measurement Study of Peer-to-Peer File Sharing Systems," Proc. of Multimedia Computing and Networking 2002 (MMCN'02), January 2002.
17. C. Shannon and D. Moore, "The Spread of the Witty Worm," IEEE Security and Privacy, vol. 2 No 4, Jul-Aug 2004, pp. 46-50, Aug 2004.
18. P.J. Smith, M. Shafi, and H. Gao, "Quick simulation: a review of importance sampling techniques in communications systems," IEEE Jour. Selected Areas Commun., vol.15, pp.597-613, May 1997.
19. S. Staniford, D. Moore, V. Paxson, and N. Weaver, "The Top Speed of Flash Worms," in Proc. ACM CCS WORM, October 2004.
20. S. Staniford, V. Paxson, and N. Weaver, "How to Own the Internet in Your Spare Time," in Proc. of the 11th USENIX Security Symposium (Security'02), 2002.
21. N. Weaver, "Warhol Worms, the Potential for Very Fast Internet Plagues," http://www.cs.berkeley.edu/~nweaver/warhol.html.
22. J. Wu, S. Vangala, L. Gao, and K. Kwiat, "An Effective Architecture and Algorithm for Detecting Worms with Various Scan Techniques," in Network and Distributed System Security Symposium, 2004.
23. Y. Xie, V. Sekar, D. A. Maltz, M. K. Reiter, and H. Zhang, "Worm Origin Identification Using Random Moonwalks," in Proc. of the IEEE Symposium on Security and Privacy (Oakland 2005),Oakland, CA, May 2005.
24. S. Xing and B.-P. Paris, "Measuring the size of the Internet via importance sampling," IEEE journal on selected areas in communications, 21(6), pages 922-933, August 2003.
25. C. C. Zou, L. Gao, W. Gong, and D. Towsley, "Monitoring and Early Warning for Internet Worms," 10th ACM Conference on Computer and Communication Security (CCS'03), Oct. 27-31, Washington DC, USA, 2003.
26. C. C. Zou, D. Towsley, W. Gong, and S. Cai, "Routing Worm: A Fast, Selective Attack Worm based on IP Address Information," 19th ACM/IEEE/SCS Workshop on Principles of Advanced and Distributed Simulation (PADS'05), June 1-3, Monterey, USA, 2005.