Functional similarities between computer worms and biological pathogens

Computers and Security

Volumn 26, Issue 4, 2007, Pages 338-347

  Li, Jun ^a   Knickerbocker, Paul ^a  

^a UNIVERSITY OF OREGON   (United States)

Author keywords

Biological infection; Biological pathogen; Biological similarity; Computer worm; Environmental exploit; Operational exploit; Worm defense; Worm detection

Indexed keywords

COMPUTER NETWORKS; COMPUTER WORMS; NETWORK SECURITY; PATHOGENS;

BIOLOGICAL INFECTION; BIOLOGICAL SIMILARITY; ENVIRONMENTAL EXPLOIT; OPERATIONAL EXPLOIT; WORM DEFENSE; WORM DETECTION;

FUNCTIONAL ANALYSIS;

EID: 34249894205     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2006.12.002     Document Type: Article

References (53)

1. Boudec JL, Sarafijanovic S. An artificial immune system approach to misbehavior detection in mobile ad-hoc networks. In: Proceedings of Bio-ADIT 2004 (The First International Workshop on Biologically Inspired Approaches to Advanced Information Technology); January 2004. p. 96-111.
2. Boukerche A., Jucá K.R.L., Sobral J.B., and Notare M.S.M.A. An artificial immune based intrusion detection model for computer and telecommunication systems. Parallel Computer 30 5-6 (2004) 629-646
3. Centers for Disease Control and Prevention. Key facts about avian influenza (bird flu) and avian influenza A (H5N1) virus; June 2006a. Available from: http://www.cdc.gov/flu/avian/gen-info/facts.htm.
4. Centers for Disease Control and Prevention. HIV/AIDS; January 2007. Available from: http://www.cdc.gov/hiv.
5. Centers for Disease Control and Prevention, Influenza (flu); August 2006b. Available from: http://www.cdc.gov/flu.
6. Centers for Disease Control and Prevention. Malaria; May 2004. Available from: http://www.cdc.gov/malaria.
7. Centers for Disease Control and Prevention. Severe acute respiratory syndrome (SARS); May 2005. Available from: http://www.cdc.gov/NCIDOD/SARS/.
8. Cheswick W.R., Bellovin S.M., and Rubin A.D. Firewalls and Internet Security; repelling the Wily Hacker. 2nd ed. (2003), Addison-Wesley, Reading, MA
9. Cohen F. Computer viruses. Computer and Security 6 (1987) 22-35
10. Cohn D. Bacterial pneumonia in persons infected with the human immunodeficiency virus. Infectious Disease Clinics of North America 5 3 (September 1991) 485-507
11. Computer Emergency Response Team. CERT advisory CA-2001-26 Nimda worm; September 2001a. Available from: http://www.cert.org/advisories/CA-2001-26.html.
12. Computer Emergency Response Team. CERT incident note IN-2001-09 Code Red II: another worm exploiting buffer overflow in IIS indexing service DLL; August 2001b. Available from: http://www.cert.org/incident_notes/IN-2001-09.html.
13. Computer Emergency Response Team. CERT incident note IN-2003-03 W32/SoBig.F worm; August 2003a. Available from: http://www.cert.org/incident_notes/IN-2003-03.html.
14. Computer Emergency Response Team. CERT advisory CA-2003-20 W32/Blaster worm; August 2003b. Available from: http://www.cert.org/advisories/CA-2003-20.html.
15. Forrest S., Perelson A.S., Allen L., and Cherukuri R. Self-nonself discrimination in a computer. Proceedings of the 1994 IEEE symposium on security and privacy (1994), IEEE Computer Society, Washington, DC, USA 202
16. Forrest S, Somayaji A, Ackley DH. Building diverse computer systems. In: Workshop on hot topics in operating systems; 1997a. p. 67-72.
17. Forrest S., Hofmeyr S.A., and Somayaji A. Computer immunology. Communications of the ACM 40 10 (1997) 88-96
18. Geer D. Malicious bots threaten network security. IEEE Computer 38 1 (January 2005) 18-20
19. Ghedin E., Sengamalay N.A., Shumway M., Zaborsky J., Feldblyum T., Subbu V., et al. Large-scale sequencing of human influenza reveals the dynamic nature of viral genome evolution. Nature (October 2005). http://dx.doi.org/10.1038/nature04239 Available from:
20. Goel S., and Bush S.F. Biological models of security for virus propagation in computer networks. LOGIN 29 6 (December 2004) 49-56
21. Goth G. Addressing the monoculture. IEEE Security and Privacy November-December (2003) 8-10
22. Hofmeyr SA. An immunological model of distributed detection and its application to computer security. Ph.D. dissertation, University of New Mexico; May 1999 [Adviser: Stephanie Forrest].
23. Immunization Action Coalition. Complacency the likely cause of measles epidemic in the seattle area; October 2002. Available from: http://www.immunize.org/reports/report051.asp.
24. Joint United Nations Programme on HIV/AIDS. AIDS epidemic update 2005; December 2005. Available from: http://www.unaids.org/epi/2005/.
25. Keizer G. Symantec anti-virus software open to attack. In: TechWeb technology news; 20 December 2005. Available from: http://www.techweb.com/wire/security/175007129.
26. Kephart JO, White SR. Directed-graph epidemiological models of computer viruses. In: Proceedings of IEEE symposium on security and privacy; May 1991. p. 343-61.
27. Kephart JO, White SR. Measuring and modeling computer virus prevalence. In: Proceedings of the 1993 IEEE symposium on research in security and privacy; 1993. p. 2-15.
28. Kephart JO, Sorkin GB, Arnold WC, Chess DM, Tesauro GJ, White SR. Biologically inspired defenses against computer viruses. In: Proceedings of international joint conference on artificial intelligence; 1995. p. 985-96.
29. Knapp K., Morris F., Rainer Jr. R.K., and Byrd T.A. Defense mechanisms of biological cells: a framework for network security thinking. Communications of the Association for Information Systems 12 47 (2003) 701-719
30. Lewis R. The rise of antibiotic-resistant infections; September 1995. Available from: http://www.fda.gov/fdac/features/795_antibio.html.
31. Li J., Reiher P.L., and Popek G.J. Resilient self-organizing overlay networks for security update delivery. IEEE Journal on Selected Areas in Communications, Special Issue on Service Overlay Networks 22 1 (January 2004) 189-202
32. Li J, Stafford S, Ehrenkranz T. SWORD: self-propagating worm observation and rapid detection, University of Oregon. Technical Report CIS-TR-2006-03; 2006.
33. Montoya I.D. Topography as a contextual variable in infectious disease transmission. Clinical Laboratory Science (Spring 2004)
34. Moore D, Shannon C, Claffy K. Code-red: a case study on the spread and victims of an Internet worm. In Proceedings of ACM Internet measurement workshop; 2002.
35. Murray W.H. The application of epidemiology to computer viruses. Computer Security 7 (1998) 139-150
36. National Institute of Allergy and Infectious Diseases. Tuberculosis; March 2006. Available from: http://www.niaid.nih.gov/factsheets/tb.htm.
37. Saltzer J., and Schroeder M. The protection of information in computer systems. Proceedings of the IEEE 53 9 (September 1975) 1278-1308
38. Shoch J.F., and Hupp J.A. The worm programs. Communications of the ACM 25 3 (1982) 172-180
39. Skormin V.A., Delgado-Frias J.G., McGee D.L., Giordano J., Popyack L.J., Gorodetski V.I., et al. BASIS: a biological approach to system information security. MMM-ACNS '01: proceedings of the international workshop on information assurance in computer networks (2001), Springer-Verlag, London, UK 127-142
40. Spafford E. The Internet worm: crisis and aftermath. Communications of the ACM 32 6 (June 1989) 678-687
41. Spafford E.H. Computer viruses-a form of artificial life?. In: Langton C.G., Taylor C., Farmer J.D., and Rasmussen S. (Eds). Artificial life II (1992), Addison-Wesley, Redwood City, CA 727-745
42. Staniford S, Paxson V, Weaver N. How to own the Internet in your spare time. In: Proceedings of USENIX security symposium; August 2002.
43. ten Asbroek A., Borgdorff M., Nagelkerke N., Sebek M., Devillé W., van Embden J., et al. Estimation of serial interval and incubation period of tuberculosis using dna fingerprinting. The International Journal of Tuberculosis and Lung Disease 3 5 (May 1999) 414-420
44. Weaver N., Paxson V., Staniford S., and Cunningham R. A taxonomy of computer worms. Proceedings of workshop on rapid malcode (2003), ACM Press, New York, NY, USA p. 11-8
45. Williamson MM, Léveillé J. An epidemiological model of virus spread and cleanup 2003. Available from: http://www.hpl.hp.com/techreports/2003/HPL-2003-39.html.
46. Wilson M.E. Travel and the emergence of infectious diseases. Emerging Infectious Diseases 1 (1995) 39-46
47. World Health Organization. World Health Organization report on infectious disease-removing obstacles to healthy development. 1999. Available from: http://www.who.int/infectious-disease-report/index-rpt99.html.
48. World Health Organization. World Health Organization report on infectious diseases. April 2002. Available from: http://www.who.int/infectious-disease-report.
49. World Health Organization & United Nations Children's Fund. Measles: mortality reduction and regional elimination. Strategic plan 2001-2005; March 2003. Available from: http://www.who.int/vaccines-documents.
50. World Health Organization. Roll Back Malaria Department, Malaria control today: current WHO recommendations. Geneva, Switzerland; March 2005a. Available from: http://www.who.int/malaria/docs/MCT_workingpaper.pdf.
51. World Health Organization. The treatment of diarrhea-a manual for physicians and other senior health workers; 2005b. Available from: http://www.who.int/child-adolescent-health/New_Publications/CHILD_HEALTH/ISBN_92_4_159318_0.pdf.
52. Yu W, Boyer C, Chellappan S, Xuan D. Peer-to-peer system-based active worm attacks: modeling and analysis. In: Proceedings of IEEE international conference on communications (ICC); May 2005.
53. Zhou L, Zhang L, McSherry F, Immorlica N, Costa M, Chien S. A first look at peer-to-peer worms: threats and defenses. In: Proceedings of international workshop on peer-to-peer systems; 2005. p. 24-35.