Analyzing cooperative containment of fast scanning worms

Jayanthkumar Kannan; Lakshminarayanan Subramanian; Ion Stoica; Randy H. Katz

Analyzing cooperative containment of fast scanning worms

Jayanthkumar Kannan, Lakshminarayanan Subramanian, Ion Stoica, Randy H. Katz

Computer Science

Research output: Contribution to conference › Paper › peer-review

Abstract

Fast scanning worms, that can infect nearly the entire vulnerable population in order of minutes, are among the most serious threats to the Internet today. In this work, we investigate the efficacy of cooperation among Internet firewalls in containing such worms. We first propose a model for firewall-level cooperation and then study the containment in our model of cooperation using analysis and simulation. Our results suggest that, with moderate overhead, cooperation among Internet firewalls can provide 95% containment under 10% deployment while being resilient to 100-1000 malicious firewalls.

Original language	English (US)
Pages	17-23
Number of pages	7
State	Published - 2005
Event	1st Steps to Reducing Unwanted Traffic on the Internet Workshop, SRUTI 2005 - Cambridge, United States Duration: Jul 7 2005 → …

Conference

Conference	1st Steps to Reducing Unwanted Traffic on the Internet Workshop, SRUTI 2005
Country/Territory	United States
City	Cambridge
Period	7/7/05 → …

ASJC Scopus subject areas

Computer Science Applications
Computer Networks and Communications
Software

Cite this

@conference{9cf9ec301d1441d080086a9d77cf9b66,

title = "Analyzing cooperative containment of fast scanning worms",

abstract = "Fast scanning worms, that can infect nearly the entire vulnerable population in order of minutes, are among the most serious threats to the Internet today. In this work, we investigate the efficacy of cooperation among Internet firewalls in containing such worms. We first propose a model for firewall-level cooperation and then study the containment in our model of cooperation using analysis and simulation. Our results suggest that, with moderate overhead, cooperation among Internet firewalls can provide 95% containment under 10% deployment while being resilient to 100-1000 malicious firewalls.",

author = "Jayanthkumar Kannan and Lakshminarayanan Subramanian and Ion Stoica and Katz, {Randy H.}",

year = "2005",

language = "English (US)",

pages = "17--23",

}

TY - CONF

T1 - Analyzing cooperative containment of fast scanning worms

AU - Kannan, Jayanthkumar

AU - Subramanian, Lakshminarayanan

AU - Stoica, Ion

AU - Katz, Randy H.

PY - 2005

Y1 - 2005

N2 - Fast scanning worms, that can infect nearly the entire vulnerable population in order of minutes, are among the most serious threats to the Internet today. In this work, we investigate the efficacy of cooperation among Internet firewalls in containing such worms. We first propose a model for firewall-level cooperation and then study the containment in our model of cooperation using analysis and simulation. Our results suggest that, with moderate overhead, cooperation among Internet firewalls can provide 95% containment under 10% deployment while being resilient to 100-1000 malicious firewalls.

AB - Fast scanning worms, that can infect nearly the entire vulnerable population in order of minutes, are among the most serious threats to the Internet today. In this work, we investigate the efficacy of cooperation among Internet firewalls in containing such worms. We first propose a model for firewall-level cooperation and then study the containment in our model of cooperation using analysis and simulation. Our results suggest that, with moderate overhead, cooperation among Internet firewalls can provide 95% containment under 10% deployment while being resilient to 100-1000 malicious firewalls.

UR - http://www.scopus.com/inward/record.url?scp=79957872505&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=79957872505&partnerID=8YFLogxK

M3 - Paper

AN - SCOPUS:79957872505

SP - 17

EP - 23

T2 - 1st Steps to Reducing Unwanted Traffic on the Internet Workshop, SRUTI 2005

Y2 - 7 July 2005

ER -

Analyzing cooperative containment of fast scanning worms

Abstract

Conference

ASJC Scopus subject areas

Other files and links

Fingerprint

Cite this