Matches in SemOpenAlex for { <https://semopenalex.org/work/W2111722182> ?p ?o ?g. }
- W2111722182 abstract "Rate control is an automated defense to slow down a worm outbreak to buy time for conventional defenses to take effect. In this study, we apply the community of households model from biological epidemiology to evaluate rate control strategies. We find that rate throttling of outbound worm traffic, implemented in the network or hosts, can be effective in slowing down a new worm outbreak given sufficient coverage of hosts. An outbreak is slowed down exponentially as the fraction of protected hosts is increased. We also find that throttling both inbound and outbound traffic can be much more effective than rate throttling only outbound traffic. I. INTRODUCTION Automated worm programs take advantage of network con- nectivity to spread from infected hosts to vulnerable hosts. A worm such as SQL Slammer has been called limited because compromised hosts were put into a simple execution loop to send out 404-byte UDP packets containing a copy of the worm to random IP addresses as fast as they could transmit packets (1). Slammer was observed to saturate the bandwidth on many links and would probably have taken advantage of more bandwidth had it been available. Faster worm outbreaks will compel organizations to depend more on automated blocking defenses compared to manual responses such as software patching and reconfiguring router access lists and firewalls. Current automated worm defenses consist of antivirus software, firewalls, and intrusion detection or prevention systems (IDS/IPS) (2), (3). These defenses attempt to detect and then block worms by a combination of misuse detection and anomaly detection. Misuse detection based on signature matching is the preferred approach of com- mercial antivirus and IDS/IPS due to its accuracy in detecting known (and similar) worms. However, new signatures may take hours to days to develop, test, and distribute after an unknown worm is discovered. Anomaly detection looking for deviations from normal baseline behavior has the potential to detect new worms without a known signature. Commercial products often in- clude heuristic behavior-blocking rules in addition to signature matching. For example, SMTP worm blocking checks if the process initiating SMTP outgoing email is an attachment in the current email; if it is, this self-mailing software is blocked (3). Another heuristic rule may look for any signs of a buffer overflow exploit which is a type of attack often used by worms." @default.
- W2111722182 created "2016-06-24" @default.
- W2111722182 creator A5035691116 @default.
- W2111722182 creator A5090198866 @default.
- W2111722182 date "2006-01-01" @default.
- W2111722182 modified "2023-09-26" @default.
- W2111722182 title "Effectiveness of Rate Control in Slowing Down Worm Epidemics" @default.
- W2111722182 cites W114870970 @default.
- W2111722182 cites W1518067596 @default.
- W2111722182 cites W1522592232 @default.
- W2111722182 cites W1527422375 @default.
- W2111722182 cites W1586871184 @default.
- W2111722182 cites W1595564425 @default.
- W2111722182 cites W1980065740 @default.
- W2111722182 cites W1988587274 @default.
- W2111722182 cites W1992097660 @default.
- W2111722182 cites W2006423444 @default.
- W2111722182 cites W2015825865 @default.
- W2111722182 cites W2030487651 @default.
- W2111722182 cites W2031006315 @default.
- W2111722182 cites W2039076742 @default.
- W2111722182 cites W2040467538 @default.
- W2111722182 cites W2056470605 @default.
- W2111722182 cites W2067064024 @default.
- W2111722182 cites W2081239878 @default.
- W2111722182 cites W2083477206 @default.
- W2111722182 cites W2086887216 @default.
- W2111722182 cites W2087425938 @default.
- W2111722182 cites W2100859857 @default.
- W2111722182 cites W2110329047 @default.
- W2111722182 cites W2115888533 @default.
- W2111722182 cites W2117741147 @default.
- W2111722182 cites W2118524012 @default.
- W2111722182 cites W2119446207 @default.
- W2111722182 cites W2134006599 @default.
- W2111722182 cites W2141380111 @default.
- W2111722182 cites W2141686553 @default.
- W2111722182 cites W2152374361 @default.
- W2111722182 cites W2159919478 @default.
- W2111722182 cites W41616940 @default.
- W2111722182 cites W563980675 @default.
- W2111722182 hasPublicationYear "2006" @default.
- W2111722182 type Work @default.
- W2111722182 sameAs 2111722182 @default.
- W2111722182 citedByCount "4" @default.
- W2111722182 crossrefType "proceedings-article" @default.
- W2111722182 hasAuthorship W2111722182A5035691116 @default.
- W2111722182 hasAuthorship W2111722182A5090198866 @default.
- W2111722182 hasConcept C111919701 @default.
- W2111722182 hasConcept C127413603 @default.
- W2111722182 hasConcept C131097465 @default.
- W2111722182 hasConcept C158379750 @default.
- W2111722182 hasConcept C173061102 @default.
- W2111722182 hasConcept C2775896111 @default.
- W2111722182 hasConcept C2776257435 @default.
- W2111722182 hasConcept C2777904410 @default.
- W2111722182 hasConcept C31258907 @default.
- W2111722182 hasConcept C35525427 @default.
- W2111722182 hasConcept C38652104 @default.
- W2111722182 hasConcept C41008148 @default.
- W2111722182 hasConcept C78519656 @default.
- W2111722182 hasConceptScore W2111722182C111919701 @default.
- W2111722182 hasConceptScore W2111722182C127413603 @default.
- W2111722182 hasConceptScore W2111722182C131097465 @default.
- W2111722182 hasConceptScore W2111722182C158379750 @default.
- W2111722182 hasConceptScore W2111722182C173061102 @default.
- W2111722182 hasConceptScore W2111722182C2775896111 @default.
- W2111722182 hasConceptScore W2111722182C2776257435 @default.
- W2111722182 hasConceptScore W2111722182C2777904410 @default.
- W2111722182 hasConceptScore W2111722182C31258907 @default.
- W2111722182 hasConceptScore W2111722182C35525427 @default.
- W2111722182 hasConceptScore W2111722182C38652104 @default.
- W2111722182 hasConceptScore W2111722182C41008148 @default.
- W2111722182 hasConceptScore W2111722182C78519656 @default.
- W2111722182 hasLocation W21117221821 @default.
- W2111722182 hasOpenAccess W2111722182 @default.
- W2111722182 hasPrimaryLocation W21117221821 @default.
- W2111722182 hasRelatedWork W123100210 @default.
- W2111722182 hasRelatedWork W1551659301 @default.
- W2111722182 hasRelatedWork W1559601858 @default.
- W2111722182 hasRelatedWork W188718413 @default.
- W2111722182 hasRelatedWork W2041225151 @default.
- W2111722182 hasRelatedWork W2047025662 @default.
- W2111722182 hasRelatedWork W2065004576 @default.
- W2111722182 hasRelatedWork W2070333012 @default.
- W2111722182 hasRelatedWork W2092043296 @default.
- W2111722182 hasRelatedWork W2121020193 @default.
- W2111722182 hasRelatedWork W2149555530 @default.
- W2111722182 hasRelatedWork W2281021314 @default.
- W2111722182 hasRelatedWork W2321926033 @default.
- W2111722182 hasRelatedWork W2379179896 @default.
- W2111722182 hasRelatedWork W258801635 @default.
- W2111722182 hasRelatedWork W2907719121 @default.
- W2111722182 hasRelatedWork W298845980 @default.
- W2111722182 hasRelatedWork W598158672 @default.
- W2111722182 hasRelatedWork W77441038 @default.
- W2111722182 hasRelatedWork W2752321765 @default.
- W2111722182 isParatext "false" @default.
- W2111722182 isRetracted "false" @default.
- W2111722182 magId "2111722182" @default.