Digging for worms, fishing for answers

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2002-January, Issue , 2002, Pages 219-226

  Buchholz, Florian ^a   Daniels, Thomas E ^a   Early, James P ^a   Gopalakrishna, Rajeev ^a   Gorman, R Patrick ^a   Kuperman, Bejamin A ^a   Nystrom, Sofie ^a   Schroll, Addam ^a   Smith, Andrew ^a  

^a Purdue University   (United States)

Author keywords

Computer crime; Computer security; Computer worms; Continuing education; Information security; Information systems; Internet; Intrusion detection; Protection; Telecommunication traffic

Indexed keywords

COMPUTER WORMS; INFORMATION SYSTEMS; INTERNET; INTRUSION DETECTION; LIFE CYCLE; SECURITY OF DATA; SECURITY SYSTEMS; TELECOMMUNICATION TRAFFIC;

CONTINUING EDUCATION; HORIZONTAL SCAN; PROTECTION; SECURITY THREATS; TARGET SELECTION;

COMPUTER CRIME;

EID: 33744947870     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2002.1176293     Document Type: Conference Paper

References (19)

1. CERT. Advisory CA-2001-02, Multiple Vulnerabilities in BIND. http://www.cert.org/advisories/CA-2001-02.html, January 2001
2. CERT. Incident Note IN-2001-03, Exploitation of BIND Vulnerabilities. http://www.cert.org/incident-notes/IN-2001-03.html, March 2001
3. CERT. Incident Note IN-2001-08, Code Red Worm Exploiting Buffer Overflow in IIS Indexing Service DLL. http://www.cert.org/incident-notes/IN-2001-08.html, July 2001
4. CERT. Advisory CA-2002-27, Apache/mod ssl Worm. http://www.cert.org/advisories/CA-2002-27.html, September 2002
5. M. Fearnow and W. Stearns. SANS Global Incident Analysis Center-Lion Worm Version 0.12. http://www.sans.org/y2k/lion.htm, April 2001
6. Fyodor. The Art of Port Scanning. http://www. insecure.org/nmap/nmap-doc.html, September 1997
7. Fyodor. Nmap. http://www.insecure.org/nmap, 2001
8. R. P. Gorman and E. H. Spafford. Reversing the Network Intrusion Detection Paradigm: The Advantages of Outbound Misuse Detection. CERIAS Technical Report, March 2002
9. G. H. Kim and E. H. Spafford. The design and implementation of tripwire: A file system integrity checker. In ACM Conference on Computer and Communications Security, pages 18-29, 1994
10. T. Liston. LaBrea: The Tarpit. http://www.hackbusters.net/LaBrea/, 2002
11. S. Northcutt, D. McLachlan, and J. Novak. Network Intrusion Detection: An Analyst's Handbook. New Riders Publishing, second edition, September 2000
12. V. Paxson. Bro: A system for detecting network intruders in real-time. Computer Networks, 31(23-24), pages 2435-2463, December 1999
13. R. Power. Computer Security Issues & Trends. Computer Security Institute, Spring 2001
14. T. H. Ptacek and T. N. Newsham. Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection. Secure Networks, Inc., January 1998
15. M. Roesch. Snort: The Open Source Network Intrusion Detection System. http://snort.sourcefire.com/, 2002
16. S. Staniford-Chen, S. Cheung, R. Crawford, M. Dilger, J. Frank, J. Hoagland, K. Levitt, C. Wee, R. Yip, D. Zerkle. Grids-a graph based intrusion detection system for large networks. The 19th National Information Systems Security Conference, 1996
17. S. Staniford, J. A. Hoagland, and J. M. McAlerney. Practical Automated Detection of Stealthy Portscans. To appear in the Journal of Computer Security, 2002. Available at http://www.silicondefense.com/research/pubs.htm
18. S. Staniford, V. Paxson, and N. Weaver. How to Own the Internet in Your Spare Time. To Appear in the Proceedings of the 11th USENIX Security Symposium, August 2002
19. G. Stocksdale. NSA Glossary of Terms Used in Security and Intrusion Detection. http://www.sans.org/newlook/resources/glossary.htm, April 1998