Analyzing cooperative containment of fast scanning worms

Steps to Reducing Unwanted Traffic on the Internet Workshop, SRUTI 2005

Volumn , Issue , 2005, Pages 17-23

  Kannan, Jayanthkumar ^a   Subramanian, Lakshminarayanan ^a   Stoica, Ion ^a   Katz, Randy H ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANALYSIS AND SIMULATION; FAST SCANNING; INTERNET FIREWALLS;

COMPUTER CRIME;

EID: 79957872505     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. N. Weaver, I. Hamadeh, G. Kesidis, and V. Paxson, "Preliminary results using scaledown to explore worm dynamics," in Proc. ACM CCS WORM, Oct 2004.
2. Stuart Staniford, Vern Paxson, and Nicholas Weaver, "How to Own the Internet in Your Spare Time," in Proc. USENIX Security, Aug 2002.
3. David Moore, Colleen Shannon, Geoffrey M. Voelker, and Stefan Savage, "Internet quarantine: Requirements for containing selfpropagating code," in Proc. INFOCOM, Apr 2003.
4. James Newsome and Dawn Song, "Dynamic taint analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software," in Proc. NDSS, Feb 2005.
5. Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Colleen Shannon, and Jeffery Brown, "Can we contain Internet worms?," in Proc. HOTNETS, Nov 2004.
6. Christina Warrender, Stephanie Forrest, and Barak A. Pearlmutter, "Detecting intrusions using system calls: Alternative data models," in IEEE Symposium on Security and Privacy, May 1999.
7. Cynthia Wong, Chenxi Wang, Dawn Song, Stan Bielski, and Gregory R. Ganger, "Dynamic Quarantine of Internet Worms," in Proc. DSN, Jun 2004.
8. V. Berk, G. Bakos, and R. Morris, "Designing a framework for active worm detection on global networks," in IEEE Intl Workshop on Information Assurance, Mar 2003.
9. Nicholas Weaver, Vern Paxson, and Stuart Staniford, "Wormholes and a Honeyfarm: Automatically Detecting Novel Worms," in DIMACS Large Scale Attacks Workshop, Sep 2003.
10. J. Wu, S. Vangala, L. Gao, and K. Kwiat, "An Effective Architecture and Algorithm for Detecting Worms with Various Scan Techniques," in Proc. NDSS, Feb 2004.
11. Nicholas Weaver, Dan Ellis, Stuart Staniford, and Vern Paxson, "Worms vs Perimeters: The Case for HardLANs," in Proc. Hot Interconnects, Aug 2004.
12. Nicholas Weaver, Stuart Staniford, and Vern Paxson, "Very Fast Containment of Scanning Worms," in Proc. USENIX Security, Aug 2004.
13. D. Nojiri, J. Rowe, and K. Levitt, "Cooperative Response Strategies for Large Scale Attack Mitigation," in Proc. DISCEX, Apr 2003.
14. K. G. Anagnostakis, M. B. Greenwald, S. Ioannidis, A. D. Keromytis, and D. Li, "A Cooperative Immunization System for an Untrusting Internet," in Proc. ICON, Oct 2003.
15. J. Twycross and M. M. Williamson, "Implementing and testing a virus throttle," in Proc. USENIX Security, Aug 2003.
16. Jaeyeon Jung, Vern Paxson, Arthur W. Berger, and Hari Balakrishnan, "Fast portscan detection using sequential hypothesis testing," in Proc. IEEE Security and Privacy, May 2004.
17. H. A. Kim and B. Karp, "Autograph: Toward automated, distributed worm signature detection," in Proc. Usenix Security, Aug 2004.
18. Vinod Yegneswaran, Paul Barford, and Somesh Jha, "Global Intrusion Detection in the Domino Overlay System," in Proc. NDSS, Feb 2004.
19. C. G. Senthilkumar and K. Levitt, "Hierarchically Controlled Co-operative Response Strategies for Internet Scale Attacks," in Proc. DSN, June 2003.
20. Stuart E. Schechter, Jaeyeon Jung, and Arthur W. Berger, "Very Fast Containment of Scanning Worms," in Proc. RAID, Sep 2004.
21. Jayanthkumar Kannan, Lakshminarayanan Subramanian, Ion Stoica, Scott Shenker, and Randy Katz, "Cooperative containment of fast scanning worms," Tech. Rep. CSD-04-1359, UC Berkeley, Nov 2004.
22. S. Staniford, "Containment of scanning worms in enterprise networks," Journal of Computer Security, 2005 (to appear).