Fast worm containment using feedback control

IEEE Transactions on Dependable and Secure Computing

Volumn 4, Issue 2, 2007, Pages 119-136

  Dantu, Ram ^b   Cangussu, João W ^a,c   Patwardhan, Sudeep ^d  

^a IEEE   (United States)

^b UNIVERSITY OF NORTH TEXAS   (United States)

^c The University of Texas at Dallas   (United States)

^d Sipera Systems   (United States)

Author keywords

Communication networking and information technology; Computer systems organization; General; Network level security and protection; Process control systems; Special purpose and application based systems

Indexed keywords

COMPUTER SYSTEM FIREWALLS; COMPUTER VIRUSES; COMPUTER WORMS; FEEDBACK CONTROL; INFORMATION TECHNOLOGY; NETWORK SECURITY; ROUTERS; TWO TERM CONTROL SYSTEMS;

COMPUTER SYSTEMS ORGANIZATION; FEEDBACK CONTROL MODELS; PROCESS CONTROL SYSTEMS;

INTRUSION DETECTION;

EID: 34249008462     PISSN: 15455971     EISSN: None     Source Type: Journal    
DOI: 10.1109/TDSC.2007.1002     Document Type: Article

References (31)

1. M.M. Williamson, "Throttling Viruses: Restricting Propagation to Defeat Malicious Mobile Code," Proc. 18th Ann. Computer Security Applications Conf. (ACSAC '02), pp. 61-68, Dec. 2002.
2. S. Staniford, V. Paxson, and N. Weaver, "How to Own Internet in Your Spare Time," Proc. 11th Usenix Security Symp., pp. 149-167, Aug. 2002.
3. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver, "The Spread of the Sapphire Worm," http://cs.berkely.edu/nweaver/ sapphire, 2005.
4. M.M. Williamson, "Design, Implementation and Test of an Email Virus Throttle," Proc. 19th Ann. Computer Security Applications Conf. (ACSAC '03), Dec. 2003.
5. N. Gandhi, D. Tilbury, Y. Diao, J. Hellerstein, and S. Parekh, "Mimo Control of an Apache Web Server: Modeling and Controller Design," Proc. 21st Am. Control Conf. (ACC '02), May 2002.
6. G.C. Goodwin, S.F. Graebe, and M.E. Salgado, Control System Design. Prentice Hall, 2001.
7. L. Ljung, System Identification: Theory for the User. Prentice Hall, 1987.
8. R. Dantu, "An Architecture of Security Engineering," Proc. ACSA Workshop Application of Eng. Principles for Security System Design, Nov. 2002.
9. C.C. Zou, W. Gong, and D. Towsley, "Code Red Worm Propagation Modeling and Analysis," Proc. Ninth ACM Conf. Computer and Comm. Security (CCS '02), pp. 138-147, Nov. 2002.
10. C.C. Zou, D. Towsley, and W. Gong, "On the Performance of Internet Worm Scanning Strategies," Performance Evaluation, vol. 63, pp. 700-723, July 2006.
11. R. Dantu, J.W. Cangussu, and A. Yelimeli, "Dynamic Control of Worm Propagation," Proc. Int'l Conf. Information Technology (ITCC '04), vol. 1, pp. 419-423, Apr. 2004.
12. J.W. Brewer, "Matrix Calculus and the Sensitivity Analysis of Linear Dynamic Systems," IEEE Trans. Automatic Control, vol. 23, pp. 748-751, Aug. 1978.
13. R.A. De Carlo, Linear Systems: A State Variable Approach with Numerical Implementation. Prentice Hall, 1989.
14. R. Dantu, J.W. Cangussu, and J. Turi, "Sensitivity Analysis of an Attack Containment Model," Proc. Int'l Conf. Intelligence and Security Informatics (ISI '05), May 2005.
15. R. Dantu and P. Kolan, "Detecting Spam in Voip Networks," Proc. Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI '05), July 2005.
16. P. Srikanth, "A Multi-Variate Analyses of SMTP Paths and Relays to Restrict Spam and Phishing Attacks in Emails," master's thesis, Univ. of North Texas, 2006.
17. T. Karagiannis, M. Molle, M. Faloutsos, and A. Broido, "A Nonstationary Poisson View of Internet Traffic," Proc. INFOCOM '04, vol. 3, pp. 1558-1569, Mar. 2004
18. M.A. Maloof, Machine Learning and Data Mining for Computer Security. Springer, 2006.
19. E.E. Bloedorn, L.M. Talbot, and D.D. DeBarr, "Data Mining Applied to Intrusion Detection: MITRE Experiences," Machine Learning and Data Mining for Computer Security, Springer, 2006.
20. T. Lane, "A Decision-Theoretic Semi-Supervisied Model for Intrusion Detection," Machine Learning and Data Mining for Computer Security, Springer, 2006.
21. J.P. Early and C.E. Brodley, "Behavioral Features for Network Anomaly Detection," Machine Learning and Data Mining for Computer Security, Springer, 2006.
22. W. Fagen, J.W. Cangussu, and R. Dantu, "Goliath: A Configurable Approach for Network Testing," Proc. Third Int'l Conf. Testbeds and Research Infrastructures for the Development of Networks and Communities (TridentCom '07), May 2007.
23. "Core Elements of the Cisco Self-Defending Network Strategy," www.cisco.com/application/pdf/en/us/guest/netsol/ns413/c654/ cdccont_0900aecd80247914.pdf, 2005.
24. P. Porras, L. Briesemeister, K. Skinner, K. Levitt, J. Rowe, and A. Ting, "A Hybrid Quarantine Defense," Proc. Second ACM SIGSAC Workshop Rapid Malcode (WORM '04), Oct. 2004.
25. U. Savagaonkar, R. Sahita, G. Nagabhushan, P. Rajagopal, and D. Durham, "An OS Independent Heuristics-Based Worm-Containment System," Intel Corp., 2005.
26. N. Weaver, V. Paxson, and S. Staniford, "Very Fast Containment of Scanning Worms," Proc. 13th Usenix Security Symp., Aug. 2004.
27. M.M. Williamson, "Throttling Viruses: Restricting Propagation to Defeat Malicious Mobile Code," Proc. 18th Ann. Computer Security Applications Conf. (ACSAC '02), Dec. 2002.
28. O.P. Kreidl and T.M. Frazier, "Feedback Control Applied to Survivability: A Host-Based Autonomic Defense System," IEEE Trans. Reliability, vol. 53, Mar. 2004.
29. S.G. Cheetancheri and K.N. Levitt, "Modelling a Computer Worm Defense System," master's thesis, Univ. of California, Davis, 2004.
30. M. Tylutki and K. Levitt, "Mitigating Distributed Denial of Service Attacks Using a Proportional-Integral-Derivative Controller," Proc. Sixth Intl Symp. Recent Advances in Intrusion Detection (RAID '03), Sept. 2003.
31. S. Cheetancheri, D. Ma, A. Ting, J. Rowe, T. Heberlien, and K. Levitt, "A Framework for Worm Defense Evaluation," Proc. US National Science Foundation Cyber Trust Ann. Principal Investigator Meeting, Sept. 2005.