routingWorm-PADS05 - RoutingWorm:AFast,Selective...

Info iconThis preview shows pages 1–6. Sign up to view the full content.

View Full Document Right Arrow Icon
1 Routing Worm: A Fast, Selective  Attack Worm based on IP  Address Information  Cliff C. Zou, Don Towsley, Weibo Gong, Songlin Cai University of Massachusetts, Amherst
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
2 Worm Propagation Illustration Find new targets IP random scanning Compromise targets Exploit vulnerability Newly infected join  infection army IPv4 space
Background image of page 2
3 Why Random Scanning? Very simple to program High coverage, hard to shut down Any vulnerable with a global IP is possible to be  directly  infected by  any  infected one Propagate very fast on IPv4 Internet Slammer infected 90% in  10 minutes IPv4 space is  small  for blindly shooting Shooting in the dark  (IPv4 space is  big )   1 out of  40,000+ 40,000+  Slammer scans hits a target Bandwidth simulation: consider unsuccessful scans
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
4 Motivation:  How Fast a Worm Can Spread? Scanning rate  η Coding skill, TCP/UDP protocol Bandwidth-limited worm (Slammer, Witty) Number of initially infected hosts  I 0 Hit-list worm (Warhol, flash)  [Weaver’01] Scanning efficiency:  p Local preference scanning Removing empty IPs from scanning space Routing worm Routing worm
Background image of page 4
5 What Is a Routing Worm?
Background image of page 5

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Image of page 6
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

Page1 / 17

routingWorm-PADS05 - RoutingWorm:AFast,Selective...

This preview shows document pages 1 - 6. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online