The evolution of viruses and worms

Statistical Methods in Computer Security

Volumn , Issue , 2004, Pages 265-286

  Chen, Thomas M ^a   Robert, Jean Marc ^b  

^a Southern Methodist University   (United States)

^b NOKIA RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85052024625     PISSN: None     EISSN: None     Source Type: Book    
DOI: None     Document Type: Chapter

References (29)

1. Cohen, F. (1987). Computer viruses: theory and experiments. Computers and Security 6:22–35.
2. Cohen, F. (1994). A Short Course on Computer Viruses. 2. NY: John Wiley & Sons.
3. Grimes, R. (2001). Malicious Mobile Code: Virus Protection for Windows. Sebastopol, CA: O’Reilly & Associates.
4. Ludwig, M. (1998). The Giant Black Book of Computer Viruses. Show Low, AZ: American Eagle Publications.
5. Harley, D., Slade, R., Gattiker, R. (2001). Viruses Revealed. NY: Osborne/McGraw-Hill.
6. von Neumann, J., Burks, A. (1966). Theory of Self-Reproducing Automata. Urbana, IL: University of Illinois Press.
7. Shoch, J., Hupp, J. (1982). The ‘worm’ programs — early experience with a distributed computation. Communications of ACM 25:172–180.
8. Spafford, E. (1989). The Internet worm program: an analysis. ACM Computing and Communication Review 19:17–57.
9. Smith, G. (1994). The Virus Creation Labs: A Journey into the Underground. Tucson, AZ: American Eagle Publications.
10. CERT advisory CA-2001–03. VBS/OnTheFly (Anna Kournikova) malicious code. http://www.cert.org/advisories/CA-2001-03.html.
11. CERT incident note CA-1999–02. Happy99.exe Trojan horse. http://www.cert.org/incident notes/IN-99-02.html.
12. Cass, S. (2001). Anatomy of malice. IEEE Spectrum 38:56–60.
13. CERT advisory CA-1999-04. Melissa macro virus. http://www.cert.org/advisories/CA-1999-04.html..
14. CERT advisory CA-1999-06. ExploreZip trojan horse program. http://www.cert.org/advisories/CA-1999-06.html.
15. CERT advisory CA-2000-04. Love letter worm. http://www.cert.org/advisories/CA-2000-04.html.
16. CERT incident note IN-2001-02. Open mail relays used to deliver Hybris worm. http://www.cert.org/incident notes/IN-2001-02.html.
17. CERT advisory CA-2001-11. Sadmind/IIS worm. http://www.cert.org/advisories/CA-2001-11.html.
18. CERT incident note IN-2001-08. Code Red worm exploiting buffer overflow in IIS indexing service DLL. http://www.cert.org/incident notes/IN-2001-08.html.
19. Berghel, H. (2001). The Code Red worm. Communications of ACM 44:15–19.
20. Staniford, S. (2001). Analysis of spread of July infestation of the Code Red worm. http://www.silicondefense.com/cr/july.html.
21. CERT incident note IN-2001-09. Code RedII: another worm exploiting buffer overflow in IIS indexing service DLL. http://www.cert.org/incident notes/IN-2001-09.html.
22. CERT advisory CA-2001-26, Nimda worm. http://www.cert.org/advisories/CA-2001-26.html.
23. F-Secure Security Information Center. F-Secure virus descriptions: Klez. (2001). http://www.europe.f-secure.com/v-descs/klez.shtml.
24. Sophos. (2001). W32/Bugbear-A. http://www.sophos.com/virusinfo/analyses/w32bugbeara.html.
25. Symantec Security Response. a. W32.lirva.C@mm. (2003). http://securityresponse.symantec.com/avcenter/venc/data/w32.lirva.c@mm.html.
26. CERT advisory CA-2003-04. MS-SQL server worm. http:// www.cert.org/advisories/CA-2003-04.html.
27. Moore, D., Paxson, V., Savage, S., Shannon, C., Staniford, S., Weaver, N. The spread of the Sapphire/Slammer worm. http://www.caida.org/outreach/papers/2003/sapphire/sapphire.html.
28. CERT advisory CA-2003-20. W32/Blaster worm. Aug. 11, 2003. http://www.cert.org/advisories/CA-2003-20.html.
29. Symantec Security Response, b. W32.Sobig.F@mm. (2003). http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html.