Accelerating the Propagation of Active Worms by Employing Multiple Target Discovery Techniques

Authors:
Xiang Fan;Yang Xiang
Affiliations:
School of Management and Information Systems Centre for Intelligent and Networked Systems, Central Queensland University, North Rockhampton, Australia 4701;School of Management and Information Systems Centre for Intelligent and Networked Systems, Central Queensland University, North Rockhampton, Australia 4701
Venue:
NPC '08 Proceedings of the IFIP International Conference on Network and Parallel Computing
Year:
2008

Citing 14
Cited 0

The internet worm program: an analysis

ACM SIGCOMM Computer Communication Review
The Code Red Worm

Communications of the ACM
Code red worm propagation modeling and analysis

Proceedings of the 9th ACM conference on Computer and communications security
Code-Red: a case study on the spread and victims of an internet worm

Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
How to Own the Internet in Your Spare Time

Proceedings of the 11th USENIX Security Symposium
Inside the Slammer Worm

IEEE Security and Privacy
Recent worms: a survey and trends

Proceedings of the 2003 ACM workshop on Rapid malcode
A taxonomy of computer worms

Proceedings of the 2003 ACM workshop on Rapid malcode
Experiences with worm propagation simulations

Proceedings of the 2003 ACM workshop on Rapid malcode
Worm anatomy and model

Proceedings of the 2003 ACM workshop on Rapid malcode
Modeling the effects of timing parameters on virus propagation

Proceedings of the 2003 ACM workshop on Rapid malcode
The Spread of the Witty Worm

IEEE Security and Privacy
Modeling and Automated Containment of Worms

DSN '05 Proceedings of the 2005 International Conference on Dependable Systems and Networks
Self-stopping worms

Proceedings of the 2005 ACM workshop on Rapid malcode

Quantified Score

Hi-index	0.00

Visualization

Abstract

Recently, active worms have done significant damage due to their rapid propagation over the Internet. We studied propagation mechanisms of active worms employing single target discovery technique and various combinations of two or three different target discovery techniques from attackers' perspective. We performed a series of simulation experiments to investigate their propagation characteristics under various scenarios. We found uniform scanning to be an indispensable elementary target discovery technique of active worms. Our major contributions in this paper are first, we proposed the discrete time deterministic Compensation Factor Adjusted Propagation (CFAP) model of active worms; and second, we suggested the combination of target discovery techniques that can best accelerate propagation of active worms discovered from results of the comprehensive simulations. The significance of this paper lies in it being very beneficial to understanding of propagation mechanisms of active worms, and thus building effective and efficient defense systems against their propagation.