458 MSIT Homework 3
Due back: Submission: Notes: April 16, 11:59pm, 2009 (by submission timestamp). Electronic submission to [e-mail] 1. To be done by each group. 2. Please do not give a simple yes/no as results to some of the questions. Briefly explain why and how you obtain that result.
i.
What is the traditional difference between viruses and worms? What is the key difference between worms and botnets?
ii.
The Internet is, slowly, transitioning from the version of the TCP/IP protocol suite currently in use IPv4 to a new version, IPv6. Unlike IPv4 IP addresses, which are 32 bits long (e.g., 192.168.10.1), IPv6 IP addresses are 128 bits long (e.g., 2001:1890:1112:0001:0000:0000:0000:0020).
iii.
Consider Internet random-scanning worms. These worms spread by choosing a random IP address, connecting to any host answering to that address, and attempting to infect it. Is the random-scanning strategy feasible if the Internet switches from IPv4 to IPv6? Why or why not? On the IPv6 Internet, try to give three different ways that a worm, executing on a compromised computer, can discover IP addresses of other hosts to try to infect.
iv.
...