Throttling viruses: Restricting propagation to defeat malicious mobile code

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2002-January, Issue , 2002, Pages 61-68

  Williamson, Matthew M ^a  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

Author keywords

Automatic control; Computer viruses; Delay; Humans; Impedance; Information filtering; Information filters; Security; Telecommunication traffic; Viruses (medical)

Indexed keywords

AUTOMATION; CONTROL; ELECTRIC IMPEDANCE; INFORMATION FILTERING; SECURITY OF DATA; SECURITY SYSTEMS; TELECOMMUNICATION TRAFFIC;

DELAY; HIGH SPEED; HUMANS; MALICIOUS MOBILE CODES; SECURITY; VIRUS PROPAGATION;

COMPUTER VIRUSES;

EID: 84948951525     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2002.1176279     Document Type: Conference Paper

References (17)

1. D. Brushi and E. Rosti. Disarming offense to facilitate defense. In Proceedings of the New Security Paradigms Workshop, Cork, Ireland, Sept. 2000
2. CERT. CERT Advisory CA-2001-19 "Code Red" Worm Exploiting Buffer Overflow In IIS Indexing Service DLL, July 2001. Available at http://www.cert.org/ advisories/CA-2001-19.html
3. CERT. CERT Advisory CA-2001-26 Nimda Worm, Sept. 2001. Available at http://www.cert.org/advisories/CA-2001-26.html
4. CERT. CERT Advisory CA-2000-04 Love Letter Worm, May 2002. Available at http://www.cert.org/advisories/CA-2000-04.html
5. eEye Security. .ida code red worm, 2001. http://www.eeye.com/html/Research/Advisories/AL20010717.html
6. Entercept. Entercept web server, 2002. http://www.entercept.com/products/
7. P. Ferguson and D. Senie. Network ingress filtering: Defeating denial of service attacks which employ IP source address spoofing, May 2000. RFC 2827
8. R. A. Grimes. Malicious Mobile Code: Virus Protection for Windows. O'Reilly & Associates, Inc., 2001
9. L. Heberlein, G. Dias, K. Levitt, B. Mukherjee, J. Wood, and D. Wolber. A network security monitor. In Proceedings of the IEEE Symposium on Security and Privacy, pages 296-304. IEEE Press, May 1990. http://seclab.cs. ucdavis.edu/papers/pdfs/th-gd-90.pdf
10. S. A. Hofmeyr. A Immunological Model of Distributed Detection and its Application to Computer Security. PhD thesis, Department of Computer Science, University of New Mexico, Apr. 1999
11. Mazu Networks. Enforcer, 2002. http://www.mazunetworks.com
12. E. Messmer. Behavior blocking repels new viruses. Network World Fusion News, Jan. 2002. Available from http://www.nwfusion.com/news/2002/0128antivirus.html
13. Okena. Stormwatch, 2002. http://www.okena.com/areas/products/products-stormwatch.html
14. A. Somayaji and S. Forrest. Automated response using system-call delays. In Proceedings of the 9th USENIX Security Symposium, pages 185-197, Denver, CO, Aug. 2000
15. S. Staniford, V. Paxson, and N. Weaver. How to 0wn the internet in your spare time. In Proceedings of the 11th USENIX Security Symposium (Security '02), 2002. Available at http://www.icir.org/vern/papers/cdc-usenix-sec02/
16. M. M. Williamson and A. Norman. Throttling viruses II: Implementation. Technical report, Hewlett-Packard Labs, 2002. In Preparation
17. ZoneAlarm. Zone alarm personal firewall, 2002. http://www.zonelabs.com/