A first look at peer-to-peer worms: Threats and defenses

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3640 LNCS, Issue , 2005, Pages 24-35

  Zhou, Lidong ^a   Zhang, Lintao ^a   McSherry, Frank ^a   Immorlica, Nicole ^a,b   Costa, Manuel ^c   Chien, Steve ^a  

^a MICROSOFT RESEARCH   (United States)

^b MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^c UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

P2P NETWORK; PEER-TO-PEER WORMS; RANDOM SCANNING; VULNERABILITIES;

COMPUTER NETWORKS; COMPUTER WORMS; DATA PRIVACY; SECURITY OF DATA;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33646065329     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11558989_3     Document Type: Conference Paper

References (26)

1. K. Calvert, M. Doar, and E. Zegura. Modeling Internet topology. IEEE Communications Magazine, June 1997.
2. M. Castro, P. Druschel, A. Ganesh, A. Rowstron, and S. S. Wallach. Secure routing for structured peer-to-peer overlay networks. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation (OSDI '02), pages 299-314, Boston, MA, USA, December 2002. USENIX.
3. Y. Chawathe, S. Ratnasamy, L. Breslau, N. Lanham, and S. Shenker. Making Gnutellalike p2p systems scalable. In Proceedings of SIGCOMM'03, pages 407-418, Karlsruhe, Germany, August 2003. ACM.
4. M. Costa, J. Crowcroft, M. Castro, and A. Rowstron. Can we contain Internet worms? In Proceedings of the 3rd Workshop on Hot Topics in Networks (HotNets-III), November 2004.
5. L. P. Cox and B. D. Noble. Honor among thieves in peer-to-peer storage. In Proceedings of the 19th ACM Symposium on Operating Systems Principles, pages 120-132, Bolton Landing, NY, USA, November 2003. ACM SIGOPS, ACM Press.
6. J. R. Crandall and F. T. Chong. Minos: Control data attack prevention orthogonal to memory model. In Proceedings of the 37th Annual IEEE/ACM International Symposium on Microarchitecture. IEEE/ACM, December 2004.
7. J. Jung, V. Paxson, A. W. Berger, and H. Balakrishnan. Fast portscan detection using sequential hypothesis testing. In Proc. 25th Symposium on Security and Privacy. IEEE, May 2004.
8. H. Kim and B. Karp. Autograph: Toward automated, distributed worm signature detection. In Proceedings of the 13th USENIX Security Symposium, August 2004.
9. C. Kreibich and J. Crowcroft. Honeycomb - creating intrusion detection signatures using Honeypots. In Proc. of the 2nd Workshop on Hot Topics in Networks (HotNets-II), November 2003.
10. D. Moore, C. Shannon, G. Voelker, and S. Savage. Internet quarantine: Requirements for containing self-propagating code. In Proceedings of IEEE INFOCOM 2003. IEEE, March 2003.
11. J. Newsome and D. Song. Dynamic taint analysis: Automatic detection and generation of software exploit attacks. In Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS 2005), Feb 2005. To Appear.
12. random nut. The PACKET 0' DEATH FastTrack network vulnerability. NET-SYS.COM Full Disclosure Mailing List Archives, May 2003. http://www.netsys.com/full-disclosure/2003/05/msg00351.html.
13. S. Ratnasamy, P. Francis, M. Handley, R. Karp, and S. Shenker. A scalable content-addressable network. In Proceedings of ACM SIGCOMM, pages 161-172, San Diego, CA, USA, August 2001.
14. A. Rowstron and P. Druschel. Pastry: Scalable, distributed object location and routing for large-scale peer-to-peer systems. In Proc. IFIP/ACM Middleware 2001, Heidelberg, Germany, Nov. 2001.
15. S. Saroiu, S. D. Gribble, and H. M. Levy. Measurement and analysis of spyware in a university environment. In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI), San Francisco, CA, March 2004.
16. S. Singh, C. Estan, G. Varghese, and S. Savage. The EarlyBird system for real-time detection of unknown worms. Technical Report CS2003-0761, UC San Diego, August 2003.
17. S. Staniford, V. Paxson, and N. Weaver. How to Own the Internet in your spare time. In Proceedings of the 11th USENIX Security Symposium, August 2002.
18. I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan. Chord: A scalable peer-to-peer lookup service for Internet applications. In Proc. ACM SIGCOMM, pages 149-160, 2001.
19. G. E. Suit, J. Lee, and S. Devadas. Secure program execution via dynamic information flow tracking. In Proceedings of ASPLOS XI, pages 85-96, Boston, MA, USA, October 2004.
20. http://securityresponse, symantec.com/.
21. N. Weaver, V. Paxson, S. Staniford, and R. Cunningham. A taxonomy of computer worms. In The First ACM Workshop on Rapid Malcode (WORM), 2003.
22. N. Weaver, S. Staniford, and V. Paxson. Very fast containment of scanning worms. In Proceedings of the 13th USENIX Security Symposium, August 2004.
23. M. M. Williamson. Throttling viruses: Restricting propagation to defeat malicious mobile code. In Proc. 18th Annual Computer Security Applications Conference, Las Vegas, NV, Dec. 2002
24. B. Y. Zhao, L. Huang, S. C. Rhea, J. Stribling, A. D. Joseph, and J. D. Kubiatowicz. Tapestry: A global-scale overlay for rapid service deployment. IEEE Journal on Selected Areas in Communications (J-SAC), 22(1):41-53, January 2004.
25. L. Zhou, F. B. Schneider, and R. van Renesse. COCA: A secure distributed on-line certification authority. ACM Transactions on Computer Systems, 20(4):329-368, November 2002.
26. C. Zou, L. Gao, W. Gong, and D. Towsley. Monitoring and early warning for Internet worms. In Proc. of the 10th ACM Conference on Computer and Communication Security, Oct. 2003.