Simulating non-scanning worms on peer-to-peer networks

ACM International Conference Proceeding Series

Volumn 152, Issue , 2006, Pages

  Chen, Guanling ^a   Gray, Robert S ^b  

^a UNIVERSITY OF MASSACHUSETTS LOWELL   (United States)

^b BAE SYSTEMS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DOMAIN NAME SYSTEM (DNS); ONLINE DETECTION; ONLINE DETECTION ALGORITHM;

ALGORITHMS; COMPUTER SIMULATION; COMPUTER WORMS; INTERNET; INTERNET TELEPHONY; RELIABILITY ANALYSIS; SENSOR DATA FUSION; STATISTICAL METHODS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 34547335735     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1146847.1146876     Document Type: Conference Paper

References (55)

1. L. A. Adamic. Zipf, Power-laws, and Pareto - A ranking tutorial, Oct. 2000.
2. D. Andersen, H. Balakrishnan, F. Kaashoek, and R. Morris. Resilient overlay networks. In Proceedings of the 18th ACM Symposium on Operating System Principles, Banff, Canada, Oct. 2001.
3. M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D. Watson. The Internet Motion Sensor - A Distributed Blackhole Monitoring System. In Proceedings of the 12th Network and Distributed System Security Symposium, San Diego, CA, Feb. 2005.
4. S.A. Baset and H. Schulzrinne. An analysis of the Skype peer-to-peer Internet telephony protocol. Technical Report CUCS-039-04, Columbia University, September 2004.
5. L. Briesemeister, P. Lincoln, and P. Porras. Epidemic profiles and defense of scale-free networks. In Proceedings of the 1st ACM workshop on Rapid Malcode, Washington, DC, Oct. 2003.
6. M. Costa, J. Crowcroft, M. Castro, and A. Rowstron. Can we contain Internet worms? In Proceedings of the Third Workshop on Hot Topics in Networks, San Diego, CA, Nov. 2004.
7. R. Cox, A. Muthitacharoen, and R. Morris. Serving DNS using a peer-to-peer lookup service. In Proceedings of the First International Workshop on Peer-to-Peer Systems, pages 155-165, Mar. 2002.
8. Z. Dezsö and A.-L. Barabási. Halting viruses in scale-free networks. Physical Review E, 65, 2002.
9. B. Ediger. Simulating network worms. http://www.users.qwest.net/ ~eballen1/nws/. Last accessed: November 2005.
10. M. Eichin and J. Rochlis. With microscope and tweezers: An analysis of the Internet virus of November 1988. In Proceedings of the 1999 IEEE Symposium on Security and Privacy, 1989.
11. D. R. Ellis, J. G. Aiken, K. S. Attwood, and S. D. Tenaglia. A behavioral approach to worm detection. In Proceedings of the 2nd ACM workshop on Rapid Malcode, Washington, DC, Oct. 2004.
12. R. S. Gray and V. Berk. Rapid detection of worms using ICMP-T3 analysis. In Proceedings of the SPIE 2004 Symposium on Defense and Security (formerly AeroSense), Orlando, Florida, Apr. 2004.
13. G. Gu, M. Sharif, X. Qin, D. Dagon, W. Lee, and G. Riley. Worm Detection, Early Warning and Response Based on Local Victim Information. In Proceedings of the 20th Annual Computer Security Applications Conference, Tucson, AZ, Dec. 2004.
14. K. P. Gummadi, R. J. Dunn, S. Saroiu, S. D. Gribble, H. M. Levy, and J. Zahorjan. Measurement, modeling, and analysis of a peer-to-peer file-sharing workload. In Proceedings of the 19th ACM Symposium on Operating System Principles, Bolton Landing, NY, Oct. 2003.
15. V. Guralnik and J. Srivastava. Event detection from time series data. In Proceedings of the Fifth ACM International Conference on Knowledge Discovery and Data Mining, San Diego, CA, Aug. 1999.
16. Q. He, M. Ammar, G. Riley, H. Raj, and R. Fujimoto. Mapping peer behavior to packet-level details: A framework for packet-level simulation of peer-to-peer systems. In Proceedings of the 11th IEEE International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunications Systems, Orlando, FL, Oct. 2003.
17. H. W. Hethcote. The mathematics of infectious diseases. SIAM Review, 42(4), Oct. 2000.
18. X. Jiang and D. Xu. Collapsar: A VM-Based Architecture for Network Attack Detention Center. In Proceedings of the 13th USENIX Security Symposium, San Diego, CA, Aug. 2004.
19. J. Jung, V. Paxson, A. W. Berger, and H. Balakrishnan. Fast Portscan Detection Using Sequential Hypothesis Testing. In Proceedings of the 2004'IEEE Symposium on Security and Privacy, Berkeley, CA, May 2004.
20. G. H. Kim and E. H. Spafford. The design and implementation of tripwire: a file system integrity checker. In Proceedings of the 2nd ACM Conference on Computer and Communications Security, Fairfax, VA, Oct. 1994.
21. H.-A. Kim and C. M. U. B. Karp. Autograph: Toward Automated, Distributed Worm Signature Detection. In Proceedings of the 13th USENIX Security Symposium, San Diego, CA, Aug. 2004.
22. M. Liljenstam, D. M. Nicol, V. H. Berk, and R. S. Gray. Simulating realistic network worm traffic for worm warning system design and testing. In Proceedings of the 1st ACM workshop on Rapid Malcode, pages 24-33, Washington, DC, Oct. 2003.
23. M. Mannan and P. C. van Oorschot. Instant messaging worms, analysis and countermeasures. In Proceedings of the 3rd ACM workshop on Rapid Malcode, Fairfax, VA, Nov. 2005.
24. A. Montresor, M. Jelasity, and O. Babaoglu. Robust Aggregation Protocols for Large-Scale Overlay Networks. In Proceedings of the 2004 International Conference on Dependable Systems and Networks, Florence, Italy, June 2004.
25. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. Inside the Slammer Worm. IEEE Security and Privacy, 1(4), July-August 2003.
26. D. Moore, C. Shannon, and k claffy. Code-Red: a case study on the spread and victims of an Internet worm. In Proceedings of the Second ACM Internet Measurement Workshop, 2002.
27. D. Moore, C. Shannon, G. Voelker, and S. Savage. Internet quarantine: requirements for containing self-propagating code. In Proceedings of the 22nd Annual Joint Conference of the IEEE Computer and Communications Societies, pages 1901-1910, San Francisco, CA, Mar. 2003.
28. D. Moore, C. Shannon, G. M. Voelker, and S. Savage. Network telescopes: Technical report. Technical report, Cooperative Association for Internet Data Analysis (CAIDA), July 2004.
29. R. Pastor-Satorras and A. Vespignani. Epidemic spreading in scale-free networks. Physical Review Letters, 86, 2001.
30. K. S. Perumalla and S. Sundaragopalan. High-Fidelity Modeling of Computer Network Worms. In Proceedings of the 20th Annual Computer Security Applications Conference, pages 126-135, Tucson, AZ, Dec. 2004.
31. H. Project. Know your enemy: Honeynets, Nov. 2003.
32. N. Provos. A Virtual Honeypot Framework. In Proceedings of the 13th USENIX Security Symposium, San Diego, CA, Aug. 2004.
33. M. Ripeanu. Peer-to-peer architecture case study: Gnutella network. In Proceedings of the First International Conference on Peer-to-Peer Computing, Linkoping, Sweden, Aug. 2001.
34. A. Rowstron and P. Druschel. Pastry: Scalable, distributed object location and routing for large-scale peerto-peer systems. In Proceedings of the 2001 International Middleware Conference, Heidelberg, Germany, Nov. 2001.
35. S. Saroiu, K. P. Gummadi, and S. D. Gribble. Measuring and analyzing the characteristics of Napster and Gnutella hosts. Multimedia Systems, 9(2), 2003.
36. S. E. Schechter, J. Jung, W. Stockwell, and C. McLain. Inoculating SSH against address-harvesting worms. http://nms.csail.mit.edu/projects/ssh/, May 2005.
37. S. Sen and J. Wang. Analyzing peer-to-peer traffic across large networks. IEEE/ACM Transactions on Networking, 12(2), Apr. 2004.
38. M. Singer. Benjamin worm plagues KaZaA. Internetnews.com, May 2002.
39. S. Singh, C. Estan, and G. V. S. Savage. Automated Worm Fingerprinting. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation, San Francisco, CA, Dec. 2004.
40. E. H. Spafford. The Internet worm: Crisis and aftermath. Communications of the ACM, 32(6), June 1989.
41. S. Stamford, V. Paxson, and N. Weaver. How to Own the Internet in Your Spare Time. In Proceedings of the 11th USENIXSecurity Symposium, San Francisco, CA, Aug. 2002.
42. S. Staniford-Chen, S. Cheung, R. Crawford, M. Dilger, J. Frank, J. Hoagland, K. Levitt, C. Wee, R. Yip, and D. Zerkle. GrIDS - a graph-based intrusion detection system for large networks. In Proceedings of the 19th National Information Systems Security Conference, 1996.
43. I. Stoica, R. Morris, D. Karger, M. F. Kaashoek, and H. Balakrishnan. Chord: A scalable peer-to-peer lookup service for internet applications. In Proceedings of the 2001 ACM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, San Diego, CA, Aug. 2001.
44. D. Stutzbach, R. Rejaie, and S. Sen. Characterizing unstructured overlay topologies in modern P2P file-sharing systems. In Proceedings of the Fifth ACM Internet Measurement Conference, pages 49-62, Berkeley, CA, Oct. 2005.
45. S. Venkataraman, D. Song, P. B. Gibbons, and A. Blum. New Streaming Algorithms for Fast Detection of Superspreaders. In Proceedings of the 12th Network and Distributed System Security Symposium, San Diego, CA, Feb. 2005.
46. N. Weaver, I. Hamadeh, G. Kesidis, and V. Paxson. Preliminary results using scale-down to explore worm dynamics. In Proceedings of the 2nd ACM workshop on Rapid Malcode, pages 65-72, Washington, DC, Oct. 2004.
47. N. Weaver, V. Paxson, S. Staniford, and R. Cunningham. A taxonomy of computer worms. In Proceedings of the 1st ACM workshop on Rapid Malcode, Washington, DC, Oct. 2003.
48. D. Whyte, E. Kranakis, and P. van Oorschot. DNS-based Detection of Scanning Worms in an Enterprise Network. In Proceedings of the 12th Network and Distributed System Security Symposium, San Diego, CA, Feb. 2005.
49. M. M. Williamson. Throttling Viruses: Restricting propagation to defeat malicious mobile code. In Proceedings of the 18th Annual Computer Security Applications Conference, San Diego, CA, Dec. 2002.
50. C. Wong, C. Wang, D. Song, S. Bielski, and G. R. Ganger. Dynamic Quarantine of Internet Worms. In Proceedings of the 2004 International Conference on Dependable Systems and Networks, Florence, Italy, June 2004.
51. V. Yegneswaran, P. Barford, and S. Jha. Global Intrusion Detection in the DOMINO Overlay System. In Proceedings of the 11th Network and Distributed System Security Symposium, San Diego, CA, Feb. 2004.
52. W. Yu, C. Boyer, and D. Xuan. Analyzing impacts of peer-to-peer systems on propagation of active worm attacks. Technical report, Department of Computer Science and Engineering, The Ohio-State University, Mar. 2004.
53. L. Zhou, L. Zhang, F. McSherry, N. immorlica, M. Costa, and S. Chien. A first look at peer-to-peer worms: Threats and defenses. In Proceedings of the 4th International Workshop on Peer-to-Peer Systems, Ithaca, NY, Feb. 2005.
54. C. C. Zou, L. Gao, W. Gong, and D. Towsley. Monitoring and early warning for internet worms. In Proceedings of the 10th ACM Conference on Computer and Communications Security, Washington, DC, Oct. 2003.
55. C. C. Zou, D. Towsley, and W. Gong. Email worm modeling and defense. In Proceedings of the 13th International Conference on Computer Communications and Networks, Chicago, IL, Oct. 2004.