On the impact of dynamic addressing on malware propagation

Proceedings of the 4th ACM Workshop on Recurring Malcode, WORM'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 51-56

  Abu Rajab, Moheeb ^a   Monrose, Fabian ^a   Terzis, Andreas ^a  

^a JOHNS HOPKINS UNIVERSITY   (United States)

Author keywords

Internet worms; Network address translation; Network security; Private address space

Indexed keywords

INTERNET WORMS; NETWORK ADDRESS TRANSLATION; PRIVATE ADDRESS SPACE;

COMPUTER WORMS; DATA PRIVACY; DISTRIBUTED COMPUTER SYSTEMS; NETWORK SECURITY;

INTERNET;

EID: 34547185428     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179542.1179554     Document Type: Conference Paper

References (20)

1. S. Antonatos, P. Akritidis, E. P. Markatos, and K. G. Anagnostakis. Defending Against Hitlist Worms Using Network Address Space Randomization. In WORM '05: Proceedings of the 2005 ACM workshop on Rapid malcode, pages 30-40, 2005.
2. th International Symposium on Recent Advances in Intrusion Detection (RAID), to appear Sept. 2006.
3. Steven M. Bellovin. A Technique for Counting NATted Hosts. In Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment (IMW), pages 267-272, 2002.
4. th ACM Workshop on Hot Topics in Networks (HotNets-IV), College Park, MD, November 2005.
5. Colleen Shannon and David Moore, The CAIDA Dataset on the Witty Worm - March 19-24, 2004, See http://www.caida.org/passive/witty/.
6. CERT. Code Red II: Another Worm Exploiting Buffer Overflow in IIS Indexing Service DLL. See http://www.cert.org/incident\_notes/in-2001-09.html.
7. CERT. Nimda Worm Advisory CA-2001-26. See http://www.cert.org/advisories/ ca-2001-26.html.
8. Zesheng Chen, Lixin Gao, and Kevin Kwiat. Modeling the Spread of Active Worms. In Proceedings of IEEE INFOCOMM, volume 3, pages 1890-1900, 2003.
9. Evan Cooke, Z. Morley Mao, and Farnam Jahanian. Hotspots: The Root Causes of Non-Uniformity in Self-Propagating Malware. In Proceedings of the International Conference on Dependable Systems and Networks DSN, pages 179-188, November 2004.
10. Symantec Corporation. Witty worm, advisory. See http://securityresponse. Symantec.com/avcenter/venc/data/w32.witty.worm.html.
11. Symantec Corporation. MS Blaster Worm Advisory, W32.Blaster.Worm. See http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html, August 2003.
12. The Distributed Intrusion Detection System (DShield). See http://www.dshield.org/.
13. Abhishek Kumar, Vern Paxson, and Nicholas Weaver. Exploiting Underlying Structure for Detailed Reconstruction of an Internet-scale Event. In Proceedings of ACM SIGCOMM/USENIX Internet Measurement Conference (IMC), pages 351-364, October 2005.
14. Larry Peterson, Tom Anderson, David Culler, and Timothy Roscoe. A Blueprint for Introducing Disruptive Technology into the Internet. SIGCOMM Computer Communication Review, 33(1):59-64, 2003.
15. th USENIX Security Symposium, pages 225-237, August 2005.
16. Moheeb Abu Rajab, Fabian Monrose, and Andreas Terzis. Worm Evolution Tracking via Timing Analysis. In Proceedings of ACM Workshop on Rapid Malware (WORM), pages 52-59, November 2005.
17. Moheeb Abu Rajab, Jay Zarfoss, Fabian Monrose, and Andreas Terzis. A Multifaceted Approach to Understanding the Botnet Phenomenon. In Proceedings of ACM SIGCOMM/USENIX Internet Measurement Conference (IMC), to appear Oct., 2006.
18. Colleen Shannon and David Moore. The Spread of the Witty Worm. IEEE Security and Privacy Magazine, 2(4):46-50, July 2004.
19. th'' Annual IEEE Symposium on High Performance Interconnects, pages 70-76, August 2004.
20. Cliff Zou, Weibo Gong, and Don Towsley. Code Red Worm Propagation Modeling and Analysis. In Proceedings of ACM Conference on Computer and Communication Security (CCS), pages 138-147, 2002.